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Recently, in order to mix algebraic and logic styles of specification in a uniform 
framework, the notion of a logic labelled transition system (Logic LTS or LLTS for 
short) has been introduced and explored. A variety of constructors over LLTS, including 
usual process-algebraic operators, logic connectives [conjunction and disjunction) and 
standard temporal operators (always and unless), have been given. However, no 
attempt has made so far to develop general theory concerning (nested) recursive 
operations over LLTS and a few fundamental problems are still open. This paper intends 
to study this issue in pure process-algebraic style. A few fundamental properties, 
including precongruence and the uniqueness of consistent solutions for equations, will be 
established. 

1. Introduction 

Algebra and logic are two dominant approaches for the specification, verification and sys- 
tematic development of reactive and concurrent systems. They take different standpoint 
for looking at specifications and verifications, and offer complementary advantages. 

Logical approaches devote themselves to specifying and verifying abstract properties 
of systems. In such framework, the most common reasonable property of concurrent 
systems, such as safety, liveness, etc., can be formulated in terms of logic formulas without 
resorting to operational details and verification is a deductive or model-checking activity. 
However, due to their global perspective and abstract nature, logical approaches often 
give little support for modular designing and compositional reasoning. 

Algebraic approaches put attention to behavioral aspects of systems, which have tended 
to use formalisms in algebraic style. These formalisms are referred to as process algebra 
or process calculus. In such paradigm, a specification and its implementation usually are 
formulated by terms (expressions) of a formal language built from a number of operators, 
and the underlying semantics are often assigned operationally. The verification amounts 
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to compare terms, which is often referred to as implementation verification or equivalence 
checking. Algebraic approaches often support compositional constructing and reasoning, 
which bring us advantages in developing systems, such as, supporting modular design and 
verification, avoiding verifying the whole system from scratch when its parts are modified, 
allowing reusability of proofs and so on ( Anderse n et al. 19 94). Thus such approaches 
offer significant support for rigorous systematic development of reactive and concurrent 
systems. However, since algebraic approaches specify a system by means of prescribing 
in detail how the system should behave, it is often difficult for them to describe abstract 
properties of systems, which is a major disadvantage of such approaches. 

In order to take advantage of these two approaches when designing systems, so-called 
heterogeneous specifications have been proposed, which uniformly integrate these two 
specification styles. Amongst, based on Biichi automata and labelled transition system 
(LTS) augmented with a predicate, Cleaveland and Liittgen provide a semantic frame- 
work for heterogenous system design (Cleaveland and Liittgen 2000, 2002). In this frame- 
work, not only usual operational operators but also logic connectives are considered, and 
must-testing preorder presented in ( |Nicola and Hennessy 1983] ) is adopted to capture 
refinement relation. Unfortunately, this setting does not support compositional reason- 
ing since must-testing preorder is not a precongruence in such situation. Moreover, the 
logic connective conjunction in this framework lacks the desired property that r is an 
implementation of a given specification p A q if and only if r implements both p and q. 

Recently, Liittgen and Vogler introduce the notion of a Logic LTS (LLTS), which com- 
bines operational and logic styles of specification in one unified framework (Liittgen and 
Vogler 2007, 2010, 2011). In addition to usual operational constructors, e.g., CSP-style 
parallel composition, hiding and so on, logic connectives (conjunction and disjunction) 
and standard modal operators (always and unless) are also integrated into this frame- 
work. Moreover, the drawbacks in (Cleaveland and Liittgen 2000, 2002) above mentioned 
have been remedied by adopting ready-tree semantics ( Liittgen and Vogler 2007 1. In or- 
der to support compositional reasoning in the presence of the parallel constructor, a 
variant of the usual notion of ready simulation is employed to capture the refinement 
relation, which has been shown to be the largest precongruence satisfying some desired 
properties ( Liittgen and Vogler 2010[ |. 

Along the direction suggested by Liittgen and Vogler in ( Liittgen and Vogler 2010 1, a 
process calculus called CLL is presented in (Zha ng et al. 2011 ), which reconstructs their 
setting in pure process-algebraic style. Moreover, a sound and ground-complete proof 
system for CLL is provided. In effect, it gives an axiomatization of ready simulation in 
the presence of logic operators. However, due to lack of modal operators, CLL still does 
not afford describing abstract properties of systems. In (jZhu et al. 2013|) . CLL is enriched 
with temporal operators always and unless by two distinct approaches. Moreover, the 
connections between the resulting calculus and action-based computation tree logic are 
explored. 

It is well known that recursive operations are fundamental mechanisms for repre- 
senting objects with infinite behavior in terms of finite expressions (see, for instance 
dBergstra et al. 20"01~1 )). Moreover, they are also powerful tools for integrating modal op- 
erators into process calculuses. For instance, the result obtained in (|Zhu et al. 2013| 
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reveals that, under the mild assumption that the set of actions is finite, we can integrate 
temporal operators always and unless into CLL in a recursive manner. Such approach 
does not resort to any nonstandard operational operators, and hence is more succinct 
than one presented by Liittgen and Vogler in ( Luttgen and Vogler 201 lj ). However, to our 
knowledge, as yet no attempt has made to develop a general theory concerning recur- 
sive operations over LLTS and a few fundamental problems are still open. Since LLTS 
involves consideration of inconsistencies, it is far from straightforward to re-establish 
existent results concerning recursive operations in such framework. A solid effort is re- 
quired, especially for handling inconsistencies. This paper intends to explore recursive 
operations over LLTS in pure process-algebraic style. We shall propose a process cal- 
culus named CLL^, which is obtained by enriching CLL with recursive operations. The 
behavior theory of CLL/? and the uniqueness of solution for equations will be established. 

The remainder of this paper is organized as follows. The next section recalls some 
related notions. Section 3 introduces SOS rules of CLL^. In section 4, the existence and 
uniqueness of stable transition model for CLL^ is demonstrated, and a few of basic prop- 
erties of the LTS associated with CLL/? are given. More further properties are considered 
in Section 5. In section 6, we shall show that the variant of ready simulation presented 
by Luttgen and Vogler is precongruent in the presence of (nested) recursive operations. 
In section 7, a theorem on the uniqueness of solution for equations is obtained. Finally, 
a brief conclusion and discussion are given in Section 8. 



2. Preliminaries 

2.1. Logic LTS and ready simulation 

This subsection will set up notations and briefly recall the notions of Logic LTS and 
ready simulation presented by Luttgen and Vogler. For motivation behind these notions 
we refer the reader to (Liittgen and Vogler 2007, 2010, 2011). 

Let Act be the set of visible actions ranged over by letters a, b, etc., and let Act T 
denote Act U {t} ranged over by a and (3, where r represents invisible actions. A labelled 
transition system (LTS) with a predicate is a quadruple (P, Act Tl — >, F), where P is a 
set of processes (states), — >C P x Act T x P is the transition relation and F C P. 

As usual, we write p q if (p,a,q) G — 5-. q is said to be an a-derivative of p if 
p q. We write p (or, p -/-^) if 3q G P.p q ($q G P.p q, respectively). 
Given a process p, the ready set {a G Act T \p —*■} of p is denoted by I{p). A state p 
is said to be stable if it cannot engage in any r-transition, i.e., p -/—)■■ The list below 
contains some useful decorated transition relations: 

p — > p q iff p — > q and p 7 q £ F. 

p ==^- q iff p(— >)*q, where (—>•)* is the transitive reflexive closure of 

p ==>■ q iff dr, s G P.p => r — > s q. 

p => \q iff p =^=> q -/^t with 7 G Act T U {e}. 

p ==$-f Q iff there exists a sequence of r— labelled transitions from p to q such that 
all states along this sequence, including p and q, are not in F. The decorated transition 
p ===> p q may be defined similarly. 
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p ===>f \q (or, p ===>f \q) iff p ==^f q (p =>f q, respectively) and q is stable. 

Remark 2.1. Notice that some notations above are slightly different from ones adopted 
by Liittgen and Vogler. In (Luttgen and Vogler 2010, 2011) the notation p ===>\q (or, 
p ==$\q) has the same meaning as p =4>f \q (respectively, p ===>f \q) in this paper, while 
p =^> \q in this paper does not involve any requirement on consistency. 

Definition 2.1 ( [Luttgen and Vogler 2010[ ). An LTS {P,Act T , — >,F) is said to be 
an LLTS if, for each p £ P, 

(LTS1) p G F if 3a G I(p)Vq £ P(p -A q implies q £ F); 

(LTS2) p e F if e P.p =^ F |g- 

Here the predicate F is used to denote the set of all inconsistent states. Compared 
with usual LTSs, it is one distinguishing feature of LLTS that it involves consideration 
of inconsistencies. Roughly speaking, the motivation behind such consideration lies in 
dealing with inconsistencies caused by conjunctive composition. In the sequel, we shall 
use the phrase "inconsistency predicate" to refer to F. The condition (LTS1) formalizes 
the backward propagation of inconsistencies, and (LTS2) captures the intuition that 
divergence (i.e., infinite sequences of r-transitions) should be viewed as catastrophic. For 
more intuitive ideas about inconsistency and motivation behind (LTS1) and (LTS2), the 
reader may refer to (Luttgen and Vogler 2007, 2010). 

Definition 2.2 ( [Luttgen and Vogler 2010[ ). An LTS {P,Act T , — >,F) is said to be 
r-pure if, for each p £ P, p implies $a G Act. p — ^-K 

Hence, for any state p in a r-pure LTS, either I(p) = {r} or I(p) C Act. Following 
( Luttgen and Vogler 2010[ ), this paper will focus on r-pure LLTSs. In (Liittgen and Vogler 
2010, 2011), the notion of ready simulation below is adopted to capture the refinement 
relation, which is a variant of the usual notion of weak ready simulation. 

Definition 2.3 (Ready simulation on LLTS). Let (P,Act T , — y,F) be a LLTS. A 
relation 1Z C P x P is a stable ready simulation relation, if for any (p, q) £ 1Z and a G Act 
(RSI) both p and q are stable; 
(RS2) p £ F implies q £ F; 

(RS3) p =^ F \p' implies Bq'.q =^ F \q' and (p', q') G K; 
(RS4) p £ F implies 2(p) = I(q). 

We say that p is stable ready simulated by q, in symbols pC q, if there exists a stable 

~RS 

ready simulation relation 1Z with (p, q) G 1Z. Further, p is said to be ready simulated by 
q 7 written p \Z RS q 7 if 

Vp'(p =>f \p' implies 3q'(q =^f W and p' C </)). 

It is easy to see that C is a stable ready simulation relation and both C and Efs 

~rs ~RS 
are pre-order (i.e., reflexive and transitive). The equivalence relations induced by them 

are denoted by ~rs and =rs, respectively. That is, 

^ RS = c n(c ) _1 and = RS 4 Q RS H^rs)- 1 . 

~RS ~RS 
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2.2. Transition system specification 

Structural Operational Semantics (SOS) is proposed by G. Plotkin in (jPlotkin 1981[) . 
which adopts a syntax oriented view on operational semantics, and gives operational se- 
mantics in logical style. Transition System Specifications (TSSs), as presented by Groote 
and Vaandrager in (Groote 1992), are formalizations of SOS. This subsection recalls ba- 
sic concepts related to TSS. For further information on this issue we refer the reader to 
(jAceto 2001| IBol and Groote 1996|IGroote 1992| . 

Let Var be an infinite set of variables and E a signature. The set of E-terms over Var, 
denoted by T(E, Var), is the least set such that (I) V A r C T(E, Var) and (II) if / G E 
and ti,...,t n G T(E,Var), then f(ti,...,t n ) G T(E, Var), where n is the arity of /. 
T(E, 0) is abbreviated by T(E), elements in T(E) are called closed or ground terms. 

A substitution a is a mapping from Var to T(E, Var)- As usual, a substitution a may 
be lifted to a mapping T(E, Var) -V T(E, Var) by a{f{h, *„)) 4 /(<r(ti), . . . , <r(t n )) 
for any n-arity / G E and ii, . . . , i„ G T(E, Va_r). A substitution is said to be closed if it 
maps all variables to ground terms. 

A TSS is a quadruple V = (E, A,P, R), where E is a signature, A is a set of labels, P 
is a set of predicate symbols and M is a set of rules. Positive literals are all expressions 
of the form t t' or tP, while negative literals are all expressions of the form t 
or f->P, where t, t' G T(E, Var), a G A and F e P. A literal is a positive or negative 
literal, and tp, ip, x are used to range over literals. A literal is said to be ground or closed 
if all terms occurring in it are ground. A rule ret has the form like ||, where H, the 
premises of the rule r, denoted as prem(r), is a set of literals, and C, the conclusion of 
the rule r, denoted as conc(r), is a positive literal. Furthermore, we write pprem(r) for 
the set of positive premises of r and nprem(r) for the set of negative premises of r. A 
rule r is said to be positive if nprem(r) = 0. A TSS is said to be positive if it has only 
positive rules. Given a substitution a and a rule r G R, cr(r) is the rule obtained from r 
by replacing each variable in r by its er-imagc, that is, a(r) = { CT (^)I^P^™( r )} _ Moreover, 
if er is closed then er(r) is said to be a ground instance of r. 

Definition 2.4 (Proof in positive TSS). Let V = (E, A, P, M) be a positive TSS. A 
proof of a closed positive literal ip from V is a well-founded, upwardly branching tree, 
whose nodes are labelled with closed positive literals, such that 
— the root is labelled with tp, 

— if x is the label of a node q and {xi ■ i G 1} is the set of labels of the nodes directly 
above q, then there is a rule {(pi : i G I}/<p in R and a closed substitution <r such that 
X = ct(v?) and Xi = f7 (</ 5 i) f° r each i G I. 

If a proof of "0 from exists, then ip is said to be provable from V, in symbols V \~ ip. 

A natural and simple method of describing the operational nature of closed terms is 
in terms of LTSs. Given a TSS, an important problem is how to associate LTS with 
any given closed terms. For positive TSS, the answer is straightforward. However, this 
problem is far from trivial for TSS containing negative premises. The notions of stable 
model and stratification of TSS play an important role in dealing with this issue. The 
remainder of this subsection intends to recall these notions briefly. 
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Given a TSS V = (£,A,P,R), a transition model M is a subset of TV(E, A) U 
Pred(E,P), where Tr(£, A) = T(£) x A x T(£) and Pred(£,P) = T(£) x P, elements 
(t, a, t') and (t, P) in M are written as t —> t' and tP respectively. A positive closed 
literal tp holds in M or ip is valid in M, in symbols M |= tp, if ^ € M. A negative closed 
literal t (or, t->P) holds in M, in symbols M |=t (Af |= t~P, respectively), if 
there is no t' such that t t' £ M(tP ^ M, respectively). For a set of closed literals 
"J, we write M |= \t iff M |= ijj for each ^1 S ty. M is said to be a model of V if, for each 
rel and a : Var — > T(E), we have M \= conc(a(r)) whenever M \= prem(a(r)). M is 
said to be supported by V if, for each ijj £ M, there exists r£l and a : Var — > T(E) 
such that M (= prem(a(r)) and conc(<r(r)) = M is said to be a supported model of 
V if M is supported by V and M is a model of V ■ 

Definition 2.5 (jAceto 20011; IBol and Groote 1996]) ■ Let P = (£, A, P, R) be a TSS 

and a an ordinal number. A function 5 : Tr(S, A) U Prec?(S,P) — > a is said to be a 
stratification of if, for every rule ret and every substitution a : Var — > T(E), the 
following conditions hold. 

(1) S(ip) < S(conc(a(r))) for each ip £ pprem(a(r)), 

(2) S(tP) < S(conc(a(r))) for each t-*P £ nprem(a(r)), and 

(3) S(t t') < S{conc{a{r))) for each t' £ T(E) and i nprem(cr(r)). 
A TSS is said to be stratified iff there exists a stratification function for it. 

Definition 2.6 (|Bol and Groote T996| [Gelfond and Lifchitz 1988jl . Let V = (E, A, P, R) 

be a TSS and M a transition model. M is said to be a stable transition model for V if 

ill = M strip (p M ^, 
where Strip(T,M) is the TSS (E, A, P, S*irip(R, M)) with 

Strip(R, M) = ( PPreT "v I r e R„™„„d and M |= nprem(r) 
^ concir) 

where R gr o«nd denotes the set of all ground instances of rules in R, and MstripCP,M) IS 
the least transition model of the positive TSS Strip(V, M). 

As is well known, stable models are supported models and each stratified TSS V has 
a unique stable model dBol and Groote 1996|) . moreover, such stable model does not 
depend on particular stratification function (Groote 1993). 

3. Syntax and SOS rules of CLL fi 

The calculus CLL^ is obtained from CLL by enriching it with recursive operations. Fol- 
lowing (Baeten and Bravctti 2008), this paper adopts the notation (X\E(V)) to denote 
recursive operations, which encompasses both the CCS operator recX.t and standard 
way of expressing recursion in ACP. Formally, the terms in CLL/{ are defined by BNF 
below: 

* ::= I _L I (a.t) \ {tDt) | (t A t) | (t V t) | (t |U t) \ X \ (X\E(V)) 
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where X E Var, a E Act Tl A C Act, V C Var and (X\E(V)) is a recursive operation 
with recursive specification E(V) and initial variable X E V. A recursive specification 
E(V) is a nonempty finite set of equations that contains precisely one equation with the 
form like X = tx for each X E V, where tx itself is a term in CLL#. In the sequel, we 
often abbreviate (X\E(V)) to (X\E) and denote (X\{X = t x }) briefly by (X\X = t x ). 

In the following, given a term (X\E) and variable Y, the phrase "Y occurs in (X\E) V 
means that Y occurs in tz for some Z = tz E E. Moreover, the scope of a recursive 
operation (X\E) exactly consists of all tz with Z = tz E E. An occurrence of a variable 
X in a given t is said to be free if it does not occur in the scope of any recursive operation 
(Y\E(V)) with X E V. A variable X in term t is said to be a free variable if all occurrences 
of X in t are free, otherwise X is said to be a recursive variable in t. 

Convention 3.1. Throughout this paper, as usual, we make the assumption that recur- 
sive variables are distinct from each other. That is, for any two recursive specifications 
E{V\) and E'{V 2 ) we have V\ fl V 2 = 0. Moreover, we will tacitly restrict our attention to 
terms where no recursive variable has free occurrences. For example we will not consider 
terms such as XO(X\X = a.X) because this term could be replaced by the clear term 
AD(y|y = a.Y) with the same meaning. 

On account of the above convention, given a term t, the set FV(t) of all free variables 
of t may be defined recursively as: 

— FV(X) = {X}; FV(0) = FV(±.) = 0; FV(a.t) = FV(t); 

— FV(h t 2 ) = FV{t\) U FV(t 2 ) with G {V, A, □, \\ A }; 

— FV((Y\E(V))) = U z=tzeE FV{t z ) - V. 

As usual, a term t is said to be closed if FV(t) = 0. The set of all closed terms of CLL^ 
is denoted as T(Scll r )- In the following, a term is said to be a process iff it is closed. 
Unless noted, we use p, q, r to represent processes. We shall always use t\ = t 2 to mean 
that expressions t\ and t 2 are syntactically identical. In particular, (Y\E) = (Y'\E r ) 
means that Y = Y' and for any Z and t z , Z = t z E E iS Z = t z E E' . 

Definition 3.1. For any recursive specification E(V) and term t, we define (t\E) to be 
t{{X\E) I X : X E V}, that is, (t\E) is obtained from t by simultaneously replacing all 
free occurrences of each X(e V) by (X\E). 

For example, consider t = XUa.{Y\Y = X UY) and E({X}) = {X = t x } then 
(t\E) = (X\X = t x )Da.(Y\Y = (X\X = t x )UY). In particular, for any recursive 
specification E(V) and t = X, (t\E) = (X\E) whenever X E V and (t\E) = X if X <£ V. 

Given a term t, the set SubT(t) of all subterms of t may be defined recursively as: 

— SubT{0) = {0}; SubT(±) = SubT(X) = {X}; SubT{a.t) = SubT{t) U {a.t}; 

— SubT(h t 2 ) = SubT(h) U SubT(t 2 ) U {h t 2 } with e {V, A, □, || A }; 

— SubT((Y\E)) = [j z=tzeE SubT{t z ) U {(Y\E)}. 

As usual, an occurrence of X in t is said to be strongly (or, weakly) guarded if such 
occurrence is within some subexpression a.t\ with a E Act (r.ti or t\ V t 2 , respectively). 
A variable X is strongly (or, weakly) guarded in t if each occurrence of X is strongly 
(weakly, respectively) guarded. Notice that, since the first move of r V s is a T-labelled 
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ID \ ~ ID \ Xl ^l' x 2 

(R a l) a (Ra2)- 



(X I — I t* 

a.xi — > x\ X\UX2 — >■ 2/1 



(fla 3 ) (_Ra 4 )- 



X1OX2 1/2 X1QE2 — yiOx2 

? — (iioe) 5 

xiDx 2 — >■ xiDj/2 xi A x 2 — > yi A j/2 

(JJar) 5l£tl« (flaB) . « ^ w 



xi A X2 — ► 2/1 A a'2 x\ A X2 — ^ x\ A 1/2 

(Rag) (Raio)- 



X\ V X2 > X\ XI V X 2 > X2 



(Ran) (Rai 2 ) 



Xl ||a X 2 2/1 |U X2 XI |U x 2 ► XI ||A 2/2 

(Ra 13 ) (if A) (Ran) - {a £ A) 

Xl \\A X2 > 2/1 |U X2 Xi \\a X 2 y Xi \\a 2/2 

(Raw) — a (oeA) (fia 16 )— — — (X = t x eE) 

xi |U X2 — > 2/1 IU »2 \ X \E) — ► V 

Table 1. Operational rules 



transition (see Table [1}, which is independent of r and s, any occurrence of X in r V s 
is treated as being weakly guarded. A recursive specification E(V) is said to be guarded 
if for each IeV and Z = tz £ E, each occurrence of X in tz is (weakly or strongly) 
guarded. 

Convention 3.2. It is well known that unguarded processes cause many problems in 
many aspects of the theory (Milner 1983) and unguarded recursion is incompatible with 
negative rules (jBloom 19 94). As usual, this paper will focus on guarded recursive specifi- 
cations. That is, we assume that all recursive specifications considered in the remainder 
of this paper are guarded. 

We now provide SOS rules to specify the behavior of processes (i.e., closed terms) 
formally. All SOS rules are divided into two parts: operational and predicate rules. 

Operational rules Rai(l < i < 16) are listed in Table [TJ where a £ Act, a £ Act T and 
A C Act. Negative premises in rules Ra2, Ra$, Rai3 and Ran give r-transition prece- 
dence over transitions labelled with visible actions, which guarantees that the transition 
model of CLL^ is r-pure. Rules Rag and Ra\o illustrate that the operational aspect of 
t\ V t% is same as internal choice in usual process calculus. The rule Rae reflects that 
conjunction operator is a synchronous product for visible transitions. The operational 
rules about other operators are usual. 

Predicate rules in Table [2] specify the inconsistency predicate F. Although both and 
_!_ have empty behavior, they represent different processes. The rule Rp\ says that _L is 
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RP3 = (iip 4 )— p: 

(«P5) ' = (Rpe)- 



xiOx2F xi \\a X2F 

X2F , , x-\F 

(Rpr)—^- (Rps)- 



z-'i IU X 2F x i A X2F 

(-Rpg) — (Rpio) - 

x\ A X2F x\ A X2F 

it, ,11 A^2 A|e,iiAi2 A , n ,ilAu -^>- z, {yF : xi AX2 y} 

[Rpii) : ^ (RP12) 

Xi A X2F xi A 

(-RP13J : ;7 («Pi4)tt— -— — (A =t x e E) 



(Rpis) 



xiAx 2 F {X\E)F 
{yF : (X\E) =±> |y} 



Table 2. Predicate rules 



inconsistent. Thus _L cannot be implemented. While is consistent, which is an imple- 
mentable process. The rule Rps reflects that if both two disjunctive parts are inconsistent 
then so is the disjunction. Rules Rp^ — Rpg describe the system design strategy that if 
one part is inconsistent, then so is the whole composition. The rules Rpio and Rpu reveal 
that a stable conjunction is inconsistent if its conjuncts have distinct ready sets. 

The rule Rpi2 formalizes (LTS1) in Def. l2.1l for processes of the form xyAx2- Although 
the universal quantifier symbol does not occur in Rp\2 explicitly, it is not difficult to 
see that the premise of Rpvi involves universal quantifier in spirit. Analogous to CLL 
( |Zhang et al. 20lTj ), we may adopt the method presented in (jVerhoef 95|) to avoid this. 
In detail, for each a £ Act T , the auxiliary predicate F a is added to CLL# and the rule 
Rp\2 is replaced by two rules below 

xi A x 2 -A y, y^F xi A x 2 y, x y A x 2 ^F a 

(RPl2-l) " p (Rpi2-2) £ ■ 

Xi A X2r a Xi A X2r 

Intuitively, pF a says that p has a consistent a-derivative. Similar to Rp\2, these two 
rules also capture (LTS1). However, it is easy to see that, due to Rpi 2 -i and Rp\2~ 2l the 
stratifying function does not exist for the resulting calculus. By means of technique so- 
called positive after reduction (|Bol and Groote 19961 . we can also get its stable transition 
model as done in QZhang et al. 20lT] ) . Moreover, such stable transition model coincides 
with AfcLLjf obtained in the next section. To avoid cumbersome reduction procedure, 
our current system employs Rp\2 instead of Rp\2~\ and Rp\2-2- 

Rules Rp\z and Rpi5 are used to capture (LTS2) in Def. 12.11 which are the abbreviation 
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of the rules with the format below 

{yF : 3y ,y!,. . .,y n (z = y -£> yi -A ^y n = y a,ndy 

zF 

with z = xi AX2 or (X\E). Intuitively, these two rules say that if all stable r-descendants 
of z are inconsistent, then z itself is inconsistent. Notice that, especially for readers who 



are familiar with notations used in (Luttgen and Vogler 2010), the transition relation 



==> | occurring in these two rules does not involve any requirement on consistency (see 
Remark l2.ll and notations above it). 

Since the behavior of any process in CLL is finite, each process can reach a stable 
state, and rules Rp\ —Rpi2 suffice to capture the inconsistency predicate F. In particular, 
these rules guarantee that the LTS associated with CLL satisfies (LTS1) and (LTS2) in 
Def . EZD ( [Zhang et al. 201T] ). However, for CLL fl , R Pl - Rp 12 are insufficient even if the 
usual rule for recursive operations (i.e. Rpu) is added. For instance, consider processes 
q = (X\X = t.X) and p = (X\X = X V 0} A a.0, it is not difficult to see that neither 
qF nor pF can be inferred by using only rules Rp\ — Rp\ 2 and Rpu, however, both p 
and q should be inconsistent due to (LTS2). Fortunately, an inference of pF (or, qF) is 
at hand by admitting the rule Rpu (Rpi5, respectively). 

Summarizing, the TSS for CLL R is V C ll r = (Scll r , ^ t ,PclLh> r CLLr), where 

— Scll k = {□, A, V, 0, ±} U {<*.() : a e Act T } U {\\ A : A C Act} U {(X\E(V)) : 
E{V) is a guarded recursive specification with X 6 V}, 

— Pcl Lj? = {F}, and 

— Kcll„ = {Rai, • • ■ , Ra w } U {Rpi, . . . , Rpis}- 



4. Stable transition model of "PclLh 

This section will consider the well-definedness of the TSS Vcll r (i-e., the existence and 
uniqueness of the stable model of Vcll r ) and provide a few basic properties of the LTS 
associated with Vcll r 

In order to demonstrate that Vcll r has a unique stable model, it is enough to give a 
stratification function of Vcll r - To this end, a few preliminary notations are introduced. 
Given a term t, the degree of t, denoted by \t\, is inductively defined as 

— |o| = ll| = K*|£>l = i; 

— |*i Qt 2 \ = \h\ + |i 2 1 + 1 for each G {A, □, V, \\ A }; 

— \a.t\ = |f| + l with a G Act T . 

The function G : T(£ CLL J — > N is defined by 
-G((X\E))±1; 

— G(0) = G(_L) = G(a.t) = G(h V t 2 ) = with a e Act T ; 

— G(h t 2 ) = G(ti) + G(t 2 ) for each e {A, □, 

Further, the function S-p cljljR from Tr(T, C Lh R , Act T ) U Pred(E CL L J? , IPcLL fi ) to wx2+l 
is given below, where w is the initial limit ordinal, 

— S PaLL Jt-2+t)±G(t)xu,+ \t\; 

— S Vc „(tF)±ujx2. 
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Since each recursive specification is assumed to be guarded (see, Convention I3.2[) . it 
is not difficult to check that this function 5-p CLL is a stratification of Pcll r - Moreover, 
since each stratified TSS has a unique stable model (jBol and Groote 1996ft . Vcll r has 
a unique stable transition model. From now on, we use Mcll r to denote such stable 
model. 

Definition 4.1. The LTS associated with CLL#, in symbols LTS'(CLLr), is the quadru- 
ple (T(E CLLR ),Act T , — ►cLL«i-F , CLLii), where 
- P -^cllh p' iff P p' G ^cllr ; 

-P6 ^CLLr iff G McLLjj. 

Therefore, p -^>oll h p' (or, p £ FclLr) if and only if Strip(Vchh R , M C ll r ) I - P p' 
(pi 71 , respectively) for any processes p, p' and a £ Act T . This allows us to proceed 
by induction on the depth of inferences when demonstrating propositions concerning 
— >cll r and Fqll r - 

Convention 4.1. For the sake of convenience, in the remainder of this paper, we shall 
omit the subscript in labelled transition relations — >cll r) that is, we shall use to 
denote transition relation in LTS (CLLr). Thus, the notation has double utility: 
predicate symbols in the TSS Vcll r and labelled transition relations on processes in 
LTS (CLLr). However, it usually does not lead to confusion in a given context. Similarly, 
the notation Fqll r will be abbreviated to F, Hence the symbol F is overloaded, predicate 
symbol in the TSS Vcll r and the set of all inconsistent processes within LTS (CLLr), 
in each case the context of use will allow us to make the distinction. 

In the following, we intend to provide a number of simple properties of LTS(CLLr). 
In particular, we will show that LTS(CLLr) is a r-pure LLTS. 

Lemma 4.1. Let p and q be any two processes. 

(1) pVg G F iftp,q G F. 

(2) a.p E F iff p e F for each a E Act T . 

(3) p q E F iff cither p e F or q £ F with € {□, 

(4) Either p £ F or q 6 F implies p A q G F. 

(5) F and IsF. 

(6) (X\X = t.X) e F. 

(7) If Vq{p =^=> \q implies q £ F) then p £ F. 

(8) eFiff G ,F for each X with X = t x £ E. 

Proof. Items (1) - (6) are straightforward. For item (7), it proceeds by induction on 
p, in particular, for the case where p is of the format p\ f\pi (or (X\E)), the conclusion 
immediately follows due to Rpi3 (respectively, Rp\$)- 

For item (8), the implication from right to left is straightforward. The argument of the 
converse implication splits into two cases based on the last rule applied in the proof tree 
of Strip(fci,hRi -^CLLfl) \~ (X\E)F. If Rpu is the last rule then the proof is trivial. For 
another case where Rpi§ is used, it is also straightforward by applying item (7) in this 
lemma and the fact that (X\E) —> r iff (tx\E) — ^ r for any r. □ 
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The notion of r-pure is a technique constraint for LLTSs (Luttgen and Vogler 2007, 
2010). The result below shows that LTS(CLLr) is indeed r-pure. 

Theorem 4.1. LTS(CLL R ) is r-pure. 

Proof. Suppose p — ^-K Hence p q for some q. Then the lemma would be established 
by proving that p -f^r for any a £ Act. It is straightforward by induction on the depth 
of the proof tree of Strip(V C LL R , M C ll r ) H P <?• □ 

In order to prove that LTS(CLLji) is a LLTS, the result below is needed. Its converse 
is an instance of (LTS1) with a — r, and hence also holds by Theorem 14.21 

Lemma 4.2. For any process p with r € I(p), if p G F then Vg(p — q implies q 6 F). 

Proof. Suppose p — q. We may prove g G f by induction on the depth of the proof 
tree T of Strip(VchL R , Mcll r ) l~ P — <Z- It proceeds by distinguishing different cases 
based on the form of p. Here we handle only three cases as samples. 



Case 1 p = piOp2- 

r ^ i 

W.l.o.g, assume the last rule applied in T is — Pl T Pl — . Hence q = p\\2p2- Since 

piDp 2 >p[Up 2 

p € F, by Lemma 2TTJ3), cither pi e f or p2 € F. If P2 € F then it immediately follows 
from Lemma |4~1T 3) that q = p[Dp2 € F. If p\ € F then p^ € F by induction hypothesis 
(IH, for short). Hence piDp2 & F, as desired. 

Case 2p = (X\E). 

The last rule applied in T is ^ x } E }T* q with I=t x £-E. Since p G F, by Lemma|lJl8), 

(X|_E) >q 

we have (*x|F) £ F. Then g 6 F by applying IH. 
Case 3 p = pi A p2- 

W.l.o.g, assume the last rule applied in T is p i ~^*Pi _ jjence q = p\ Ap2- In the 

following, we intend to show q G F by distinguishing four cases based on the last rule 
applied in the inference of Strip(VcLL R , Mcll r ) I - Pi A P2F. 

Case 3.1 or -^L. 

Similar to Case 1, omitted. 

Case 3 2 pi rrtppg 7^ ,pi Ap2 7^ or pi 7^->,P2 ^±I>£i a p* ^ 

PlAp 2 F PlAp 2 F 

This case is impossible because of r € I(pi AP2). 

Case 3 3 P lA P 2 ^ r 'f r '- F: P 1 Ap2- g -»»-'} 

Since LTS'(CLL^) is r-pure and pi Ap2 — — ■>, we have a = r. Hence q £ F immediately. 

Case 3.4 I^p^H 
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Assume q = p\ Ap2 ==> \r' . Thus r' E F due to p — ^ p^ Ap2 ==>• r'- Hence p^ Ap2 G F 
by applying the rule Rpiz- D 

Now we are ready to show that LTS(CLLb) is a LLTS. 

Theorem 4.2. LTS^CLLr) is a LLTS. 

Proof. (LTS1) Suppose a G F(p) and W(p — > r implies r £ F). Then p — > g for 
some g. To complete the proof, we intend to show p G F. It proceeds by induction on the 
depth of the proof tree T of Strip(PcLL B ,-McLL K ) F p —> q. We distinguish different 
cases based on the form of p. In particular, the proof for the case p = p\ Ap2 is immediate 
by the rule Rp\2- In the following, we give the proof for the case p = p\ \a Pi-, the other 
cases are left to the reader. The argument splits into two cases depending on a. 

Case 1 a = r. 

W.l.o.g, assume the last rule applied in T is pi T^ Pl • Thus q = p\ |U Vi- 

P1\\a P2— +Pi\\AP2 

If P2 € F then p\ \\a P2 G F comes from Lemma 14.1( 3) at once. For another case 
P2 ^ F, it is not difficult to see that each r-derivative of p\ is inconsistent, that 
is Vp"(pi — H> Pi implies p'{ € F). Hence p\ G F by IH. Therefore it follows from 
Lemma |4~17 3) that p\ \\a P2 G F, as desired. 

Case 2 a G Act. 

In such situation, the last rule applied in T has one of the following three formats: 

Pl||AP2 >pi||AP2 Pl||AP2 S-P1IUP2 Pl||AP2 >P'iIUP2 

We consider only (3), the other two may be handled in a similar manner as the case 
a = t. Since Vr(pi ||a Pi — * r implies r G F), by Lemma [4.1( 3). it is easy to see that 
either Vr(pi r implies r G F) or W(p 2 - >• r implies r G i* 1 ). On the other hand, due 
to a G I(pi) and a G I(p2), by IH, we have pi G F or p2 G F, which implies p\ \a P2 G F. 

(LTS2) It suffices to show that, for each p, if p ^ F then p ==>f \q for some q. Suppose 
p F. By Lemma l4~TT 7). there exists q such that p =^> |g and q F. Then it immediately 
follows from Lemma r 4.2l that p ==>f \q, as desired. □ 

A simple observation on proof trees for Strip(VcLL R , Mcll„ ) l~ P A qF is given below, 
which will be used in establishing a fundamental property of conjunction compositions. 

Lemma 4.3. For any finite sequence po Aqo .., — piAqi .., \p n Aq n (n > 0), 
if pi A qi G F and pi, q L £ F for each i < n, then the inference of po A <7o^ essentially 
depends on p n A q n F, that is, each proof tree for Strip(Vchh R , Mchh R ) ^ Po A qoF has 
a subtree with the root labelled with p„ A q n F, in particular, such subtree is proper if 
n > 1. 

Proof. We prove it by induction on n. For the inductive basis n — 0, it holds trivially 
due to po A qo = p n A g n . For the inductive step, assume that po A qa p\ A qi(—-¥ 
) k \Pk+i A q k+1 . Let T be any proof tree for Strip(VcLh R , M C ll r ) r- Po A q F. Since 
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Po, Qo £ F and po A qo — the last rule applied in T is 

p Aq -^r',{rF:p Aqa-^r} {rF : p Aq |r} 

either or . 

po A q F po A q F 

For the hrst alternative, since LTS(GLLr) is r-pure, we have a — t. Then it follows 
from po A qo p\ A q\ that, in the proof tree 7", one of nodes directly above the root is 
labelled with p\ A q\F . Thus, by IH, T has a proper subtree with the root labelled with 
Pk+i A qk+iF. 

For the second alternative, since po A qo ==► \pk+i A qt+i, one of nodes directly above 
the root of T is labelled with pk+i A qk+iF, as desired. □ 

The next three results has been obtained for CLL in pure process-algebraic style in 



( Zhang et al. 2011] ), where the proof essentially depends on the fact that, for any process 
p within CLL and a G Act T , p is of more complex structure than its a-derivatives. 
Unfortunately, such property does not always hold for CLL^. For instance, consider the 
process (X\X = a.X \\q a.b.X). Here we give another proof along lines presented in 
(|Zhu et al. 2013|) . 

Lemma 4.4. If p\ □ P2, Pi C pz and p\ £ F then p2 Ap% £ F. 

~RS 

Proof. Let 51 = {qAr : p C q,p \Z r and p £ F}. Clearly, it is enough to prove that 

~RS ~RS 

FCifl = 0. Conversely, suppose that -FH51 ^ 0. In the following, we intend to prove that, 
for each t G 51, any proof tree of tF is not well-founded. Then a contradiction arises at 
this point due to Def. 12.41 Thus, to complete the proof, it suffices to show the claim below. 

Claim For any s G 51, each proof tree of sF has a proper subtree with the root labelled 
with s'F for some s' € 51. 

Suppose qAr € 51. Then p \Z q, p C r and p £ F for some p. Thus it follows that 

~RS ~RS 

q £ F,r £ F and l(p) = X{q) = l(r). gUl) 

Let T be any proof tree of Strip(PchL R , Mcll r ) \~ q A rF. By (|4.4U ). the last rule 
applied in T is of the form 

. , {sF : q A r =^=> Is} qAr s', {sF : q A r s} 

either or . 

q A rF q A rF 

Since both q and r are stable, so is q A r. Then, for the first alternative, the label of the 
node directly above the root of T is q A rF itself, as desired. 

Next we consider the second alternative. In such case, r ^ a G I(q A r) and 

Vs(g A r s implies s € F). (|4.4I 2) 

Hence a G I(<?) fll(r). Then a G due to (|44l lV Further, since p £ F, by Theo- 
rem 221 we get 

p —>f P ==^f \p" for some p' and p". (|4.4I 3) 
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Then it immediately follows from pC g and p \Z r that 

~RS ~RS 



g -^-f q ==>f \q" and p" c g" for some g',g",and (|4.4I 4) 

~RS 

r — — > ^ r' ==>f |»"" andp" C r" for some r',r". (|4.4I 5) 

~KS 

So, 5 A r g' A r'. Then g' A r' E F by (|4.4I2). Moreover, we obtain q' = g -^f 
, . . . , — >p \q n = q" for some g^ with < i < n, and r' = r — >p, . . . , — >p \r m = r" for 
some rj with < j < m. Then 

g' A r' = q A r - L >-, .., g„ Ar A g„ A n, .., -A |g„ A r m = g" A r". (gH6) 

By Lemma 14.21 it follows from g' A r' e F that 

g.; A r j £ F for each g, A occurring in (|4.4I 6). (14.41 7) 

It follows from fO]3), (@3l4) and (IQ1 5 1 ) that q n Ar m = q" A r" G £1. Moreover, since 
one of nodes directly above the root of T is labelled with q' Ar'F, by (14.41 6) . (|4.4I 7~) and 
Lemma 14.31 it follows from qi £ F and rj ^ F with < i < n and < j < m that T has 
a proper subtree with the root labelled with q n A r m F. □ 

Lemma 4.5. If p C g and pC r then pC g Ar. 

~ iiS ~ AS ~ RS 



Proof. Set 



It suffices to show that 72. is a stable ready simulation relation, which is almost immediate 
by using Lemma IP1 to handle (RS2) and (RS3). □ 



We conclude this section with recalling a result obtained in (Liittgen and Vogler 2010) 
and ( Zhang et dl. 2011] ) in different style, which reveals that ^rs is precongruent w.r.t 
the operators □, \\a, V and A. Formally, 

Theorem 4.3. 

(1) For each 6 {□, \\a, A}, if p C q and sC r then p s C gQr. 

(2) For each e {□, H^, V, A}, if p C fls g and s Q R s r then p0s C fls g r. 

Proof. The item (2) follows from item (1). For item (1), the proofs are not much 
different from ones given in (Zh ang et al. 20TTj ). In particular, Lemma 14.51 is applied in 
the proof for the case = A. □ 



5. Basic properties of unfolding, context and transition 

This section will provide a number of useful results that will be used in the following sec- 
tions. In particular, we shall attend to elementary properties of unfolding and describing 
transitions in terms of contexts. 
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5.1. Unfolding 

The notion of unfolding plays an important role in dealing with recursive operators. This 
subsection will give a few results concerning it. We begin with recalling the notion of 
unfolding. 

Definition 5.1. Let X be a free variable in a given term t. An occurrence of X in t is 
said to be unfolded, if this occurrence does not occur in any scope of recursive operations 
(Y\E). Moreover, X is said to be unfolded if all occurrences of X in t are unfolded. 

Definition 5.2 (B aeten and Bravetti 2008|) . A series of binary relations over 
terms with k < oj is defined inductively as: 

— t s if t = s; 

— t ^i s if t has a subterm (Y\E) with Y — ty £ E which is not in any scope of 
recursive operations, and s is obtained from t by replacing this subterm by (ty\E); 

— t ^k+i s if t t' and t' s for some term t' . 

Moreover, ^= (J For any t and s, s is said to be a multi-step unfolding of t if 

Q<k<uj 

t =^ S. 

For instance, consider t = ((X\X = a.XUb.{Y\Y = c.Y))Ud.Q)UZ , we have 

t ((a.(X\X = a.XOb.(Y\Y = c.Y))Db.{Y\Y = c.Y))Ud.Q)UZ , 

but it does not hold that t {{X\X = a.XUb.c.{Y\Y = c.Y))Ud.Q)UZ because the 
subterm (Y\Y — c.Y) is in the scope of the recursive operation (X\X = a.XOb.(Y\Y = 
c.Y)). The simple result below provides an equivalent formulation of the binary relation 
^i. 

Lemma 5.1. For any term t\ and t2, ti ^i ^2 iff there exists a term s and variable X 
such that 

(1^) X is a unfolded variable in s, 
(2^) X occurs in s exactly once, and 

(3^) h = s{(Y\E)/X} and t 2 = s{(t Y \E)/X} for some Y, E with Y = ty £ E. 

Proof. Immediately follows from Def. 15.21 □ 
A few trivial but useful properties concerning ^„ are listed in the next lemma. 

Lemma 5.2. For any term t, s and X £ FV(t), if t ^>„ s then 

(1) if X is unfolded in t then so is it in s and the number of occurrences of X in s is 
equal to that in t; 

(2) the number of unguarded occurrences of X in s is not more than that in t\ 

(3) if X is (strongly) guarded in t then so is it in s; 

(4) FV(s) C FV(t); 

(5) if X occurs in the scope of conjunction in s (that is, there exists a subterm t% A ti of 
s such that X occurs in either t\ or £2) then so does it in t. 

Proof. By Lemma 15. II and Convention 13.21 it is straightforward by induction on n. □ 
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Notice that the clause (2) in the above lemma does not always hold for guarded oc- 
currences. For example, consider t = (X\X = a.X A b.Y), we have t a.(X\X — 
a.X A b.Y) A b.Y, and Y guardedly occurs in the latter twice but occurs in t only once. 
Clearly, the clause (2) strongly depends on Convention ^. 21 Moreover, the clause (4) can- 
not be strengthened to u FV(s) = FV(t)". Consider t = (Xi\{Xi = a.0,X 2 = b.XiUY}) 
and t a.O, then we have FV{t) = {Y} and FV(a.O) = 0. 

Given a variable X and term t, the folding number of X in t, in symbols FN(t, X), is 
defined as the sum of depths of nesting recursive operations surrounding all unguarded 
occurrences of X in t. Formally, 

Definition 5.3 (Folding number). Given a term t and X £ FV(i), the folding number 
of X in t, denoted by FN(t, X), is defined recursively below, where UFV(t) is the set of 
all free variables which have unguarded occurrence in t. 

— FN(0, X) = FN(±, X) = FN(Y, X) = FN(X, X) = FN(h V t 2 , X) = 
FN(a.t,X) = 0; 

— FN(h © t 2 , X) 4 FN(t u X) + FN(t 2 ,X) with £ {□, \\ A , A}; 



FN((Y\E),X) = 



1+ £ FN(t z ,X), HX £UFV({Y\E)); 
z=t z eE 



0, otherwise. 



For instance, consider t = (X\X = a.X V Yi)U{Z\Z = c.ZUY 2 ), then FN(t, Yi) = and 
FN(t,Y 2 ) = l. 

Lemma 5.3. For any term t, there exits a term s such that t ~> s and each unguarded 
occurrence of any free variable in s is unfolded. 

Proof. It proceeds by induction on n = FN(t,X). For the induction base 

X£UFV(t) 

n = 0, it is easy to see that for each X £ FV(t), any unguarded occurrence of X in t 
must be unfolded. Thus t itself meets our requirement because of t ^ t. For the inductive 
step n = k+ 1, due to n = k + 1 > 0, t is of the format either t\ 1 2 with £ {A, \\a Q} 
or (Y\E) . In the following, we shall proceed by induction on the structure of t. For the 
case t = t\ t 2 with £ {A, \\a, it is straightforward by applying IH on t\ and t 2 . 
Next we consider the case t = (Y\E) with Y = ty £ E. 

Clearly, UFV((Y\E)) ^ because of n > 0. Since (Y\E) (t Y \E), by Lemma[0;2)(4), 
we have 

UFV((t Y \E)) C UFV((Y\E)). 

Moreover, by Convention 13.21 and the definition of (ty\E), it is not difficult to get 

FN((Y\E),X) > FN((t Y \E),X) for each X £ UFV{(t Y \E)). Hence 

Y, FN((t Y \E),X)< Y FN((Y\E),X). 

X£UFV({ty\E)) XeUFV({Y\E)) 

Then, by IH on n, there exists s such that (t Y \E) ^ s and each unguarded occurrence 
of any free variable is unfolded in s. Moreover, (Y\E) ^ s due to (Y\E) (t Y \E). □ 
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5.2. Contexts and transitions 

Due to the rules Rp\2, Rpi3 and Rpi5, in order to obtain further properties of the 
inconsistency predicate F, we often need to capture the connection between the formats 
of p and q for a given transition p -^4 q. Clearly, if p involves recursive operations, q is 
not always a subterm of p and its format often depends on some unfolding of p. This 
subsection intends to explore this issue. 

Definition 5.4 (Context). A context C^ is a term whose free variables are among 
X = {Xi, X n } (n > 0). Given processes with i < n, the term C x {pi/Xi, ...,p n /X n } 
(C x {p/X}, for short) is obtained from C x by replacing Xi by pi for each i < n simul- 
taneously. In particular, we use C x {p/X} to denote the result of replacing all variables 
in X by p. A context C x is said to be stable if C x {0/X} -f-*. 

In the remainder of this paper, whenever the expression C x {p/X} occurs, we always 
assume that \p\ = \X\ and C x {p/X} is subject to Convention 13.11 (recursive variables 
occurring in p may be renamed if it is necessary), where \X\ is the length of the tuple X. 

Definition 5.5 (Active). An occurrence of a free variable X in term t is said to be 
active if such occurrence is unguarded and unfolded. A free variable X in term t is said 
to be active if its all occurrence are active. A free variable X in term t is said to be 
1-active if X occurs in t exactly once and such occurrence is active. 

For example, X is 1-active in (Y\Y = a.Y)DX. Moreover, it is evident that, for any 
context Cs, if there exists an active occurrence of some variable within C x , then C x 
is not of the form a.B x , B x V D x and (Y\E). This fact is used in demonstrating the 
next two lemmas, which give some properties of 1-active place-holder. Before presenting 
them, for simplicity of notation, we introduce the notation below. 

Notation Given n-tuple processes p = {pi, . . . ,p n } and p' , we use p \p'/pi] to denote 
{Pi, ■■■,Pi-l, p',p i+ i,..., p n }- 

Lemma 5.4. For any with 1-active variable Xi andp withp Jf) p' , C^{p/X} 
C^{p[p'/ Pl0 ]/X}. 

Proof. Proceeding by induction on the structure of . □ 

This result does not always hold for visible transitions. For instance, consider Cx = 
XOr.r andp = a.q, although^ — — > q and X is 1-active in Cx, it is false that Cx{p/X} — ^ 

Lemma 5.5. For any p and Cx with 1-active variable X, if p £ F then Cx{p/X} € F. 

Proof. By a straightforward induction on Cx- D 

In order to prove that Qrs still is precongruent in the presence of recursive operations, 
it is necessary to formally describe the contribution of C x and p for a given transition 
C^{p/X} — r. In the following, we shall provide a few of results concerning this. We 
begin with considering r-labelled transitions. Before giving the next lemma formally, we 
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illustrate the intuition behind it by means of an example. Consider Cx = {a.O V X)DX, 
Bx = (Y\Y = XDb.Y)Dc.O, p = r.O and q = d.O, then we have two r-labelled transitions 
below 

C x {q/X} o.ODd.0 

and 

B x {p/X} (0Db.(Y\Y = T.ODb.Y))Dc.O. 

It is not difficult to see that these two T-labelled transitions depend on the capability 
of Cx and p respectively. In other words, for any q' and p' with p' -—t, corresponding 
r-transitions still exist for Cx{q'/X} and Bx{p' /X}. Moreover, the targets have the 
same pattern. For instance, set C' x = a.ODX, then we have Cx{q/X} C' x {q/X} and 
Cx{q'/X} — ^» C' x {q'/X}. We summarize this observation formally as follows, where two 
clauses capture r-transitions exited by contexts and substitutions respectively, moreover, 
some simple properties on contexts are also listed in (C-r-3) which will be used in the 
sequel. 

Lemma 5.6. For any C x and p, if C x {p/X} — r then one of conclusions below holds. 

(1) There exists C'~ such that 
(C-T-l) r = C"~{p/X}; 

(C-t-2) for any processes q, C x {q/X} C'~{q/X}; 
(C-r-3) for each lei, 

(C-r-3-i) if X is active in C x then so is it in C'~ and the number of occurrences 
of X in C'~ is equal to that in C x ; 

(C-r-3-ii) if X is unfolded in C x then so is it in C'~ and the number of occurrences 
of X in C'~ is not more than that in C x ; 

(C-r-3-iii) if X is strongly guarded in C x then so is it in C~; 

(C-r-3-iv) if X docs not occur in any scope of conjunctions in C x then nor does 
it in C'~. 

(2) There exist C'~, C'L z with Z £ X and i < \X\ such that 

(P-t-1) C x ^ C'~, in particular, if Xi is active in C x then C'~ = C x ; 
(P-t-2) Vl -A p' and r = C"~ Z {p/X,p'/Z} for some p'; 
(P-r-3) C"~ JXi/Z} = C'~ and Z is 1-active in C"~ : 

(P-t-4) for any processes g with — — >■ q' , C' x {q/X} C'~ Z {q/X,q' /Z}. 

Proof. It proceeds by induction on the depth of the inference of Strip(VchL R , Mqll r ) ^ 
C x {p/X} — — > r. We distinguish six cases based on the form of C x as follows. 

Case 1 C x is closed. 

Set C'~ = r. Then (C-r-1,2,3) hold trivially. 

Case 2 C x = X with X e X. 

Put C^=Iand^ z = 2 with Z £ X. Then it is easy to check that (P-t-1) 
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(P-t-4) hold. 

Case 3 C x = a.B x . 

Thus a — t and r = B x {p/X}. Then it is not difficult to see that (C-r-1,2,3) hold by 
taking C'~ = B x . 

Case 4 C x = B x V D x . 

Obviously, r = B x {p/X} or r = D x {p/X}. W.l.o.g, assume that r = B x {p/X}. We 
set C'~ = B x . Then it is straightforward that (C-r-1,2) and (C-r-3-ii,iii,iv) hold. More- 
over, since C x = B x V D x , for each X e X, each occurrence of X is weakly guarded. 
Hence (C-r-3-i) holds trivially. 

Case 5 C x = B x D x with e {□, A, 

We consider the case = □, others may be handled similarly and omitted. W.l.o.g, 
assume the last rule applied in the inference is 

B x {p/X}^r> 
B x {p/X}DD x {p/X} -A r'UD x {p/X}' 

Then r = r'UD x {p/X}. For the r-labelled transition B x {p/X} r' , by IH, either 
the clause (1) or (2) holds. 

For the former case, there exists B'~ that satisfies (C-r-1,2,3). Put C'~ = B'~UD X . It 
immediately follows that C'~ satisfies (C-r-1,2,3). 

Next we consider the later case. In such situation, there exist B'~, B"~ with Z ^ X 
and i < \X\ that satisfy (P-r-1) - (P-r-4). Set 

C 'x= B 'x DD x ^C'i z = B 'iz DD x- 

We shall show that, for the r-labelled transition C x {p/X} — ^> r, C'~, C"~ and i 
realize (P-r-1) - (P-r-4). 

(P-r-1) It follows from B x ^ B'~ that C x = B X DD X ^ B'~UD X = C'~. If X io is 
active in then so is it in B^, and hence C'~ = due to B'~ = B^. 

A A X X X X 

(P-r-2) Since B'~ satisfies (P-r-2), p lQ p' and r' = B"~ Jp/X,p'/Z} for some p' . 

X. J\ ,2j 

Due to Z <£ X, we have r = B' xz {p/X,p'/Z}DD x {p/X} = C'L ^p/X^'/Z}. 

(P-r-3) It follows from B"~ JX io /Z} = B'~ and Z $ X that C"~ jX io /Z} = 
B % J x i / z } aD x = CV Moreover, since Z is 1-active in B"~ . so is it in C% . 

(P-r-4) Let qbe any tuple with \q\ = \p\ and qi — q' . It follows from B x {q/X} 
B'L z {q/X, q '/Z} and Z ^X that C x {q/X} C' xz {q/X,q'/Z}. 

Case 6 C x = (Y\E). 
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Clearly, the last rule applied in the inference is 
(t Y \E){p/X}^r 



(Y\E){p/X} r 



with Y = t Y e E. 



For the r-labelled transition (t Y \E){p/X} — r, by IH, either the clause (1) or (2) 
holds. 

For the first alternative, there exists C'~ satisfying (C-t-1,2,3). Then it is not difficult 
to check that, for the transition (Y\E){p/ X} — > r, C'~ also realizes the conditions (C- 
r-1,2,3). Here (Y\E){p/X} (t Y \E){p/X} and Lemma H2£3)(5) are used to assert 
(C-r-3-iii,iv) to be true. 

For the second alternative, there exist C'~, C"~ with Z 4 X and iq < \X\ that 
satisfy (P-r-1,2,3,4). Clearly, C'~, C'~ and io also realize (P-r-1,2,3,4) for the transition 

(Y\E){p/X} r. In particular, (Y\E) e$ C'~ follows from (Y\E) ^ (t Y \E) ^ C'~. □ 

As an immediate consequence of Lemma 15.61 we have 
Lemma 5.7. For any context C x , C x is stable iff C x {p/X} ■/—> for some p. 

Proof. Straightforward by Lemma 15.61 D 



The next lemma is an instance of Lemma 15 .61 which considers the case where the 
substitution is of the form (Y\E) or (ty\E). 

Lemma 5.8. For any Y, E with Y = ty <G E and context Cx with at most one occurrence 
of the unfolded variable X , we have 

(1) if C X {(Y\E)/X} q then there exists B x such that 

(1.1) q = B X {(Y\E)/X}, 

(1.2) C x {(t Y \E)/X} -A B x {(t Y \E)/X}, and 

(1.3) X occurs in Bx at most once, moreover, such occurrence is unfolded; 

(2) if Cx{{t Y \E)/X} q then there exists Bx such that 

(2.1) q = B x {(t Y \E)/X}, 

(2.2) C X {(Y\E)/X} -A B X {(Y\E)/X}, and 

(2.3) X occurs in Bx at most once, moreover, such occurrence is unfolded. 

Proof. We prove only item (1), and the same reasoning applies to item (2). Assume 
Cx{(Y \E)/X} ~^-> q. Then, for such transition, by Lemma [5.6[ cither there exists C' x 
that satisfies (C-r-1,2,3) or there exist C' x , C x z with Z ^ X that satisfy (P-r-1,2,3,4). 

For the first alternative, it follows from C' x satisfies (C-r-1,2) that q = C' X {(Y\E)/X} 
and C x {{t Y \E)/X} C' x {(t Y \E)/X}. Moreover, due to (C-r-3-ii), there is at most 
one occurrence of the unfolded variable X in C' x . Consequently, the context C' x is exactly 
one that we seek. 

For the second alternative, by (P-r-2), there exists q 1 such that 

(Y\E) q' and q = C'{(Y\E)/X, q'/Z}. 
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Hence (t Y \E) q'. Then it follows from (P-r-4) that 

Cx{(^|S)/X} -A C XtZ {{t Y \E}/X,q'/Z}. 

On the other hand, due to (P-r-1), by Lemma l5?2T l). there is at most one occurrence of 
the unfolded variable X in C' x . Moreover, since C' x and C x z satisfy (P-r-3), we obtain 
X $ FV(C XiZ ). Hence q = C X<Z {(Y\E) / X,q' /Z} = C' XiZ {(t Y \E}/X, q'/Z}. Then it is 
easy to see that B x = q is what we need. □ 

In the following, we intend to provide an analogue of Lemma l5.6l for transitions labelled 
with visible actions. To explain intuition behind the next result clearly, it is best to work 
with an example. Consider C Xl ,x 2 = ((Xi/\(Y\Y = a.Y))\3a.b.O) ||{ b } (X 1 AX 2 ),p 1 = a.O 
and p 2 = a.c.O, we have three a-labelled transitions below 

C XuX2 { Pl /X lyP2 /X 2 } (0 A (Y\Y = a.Y)) \\ {b} (a.O A a.c.O), 
C Xl ,x 2 {pi/X 1 ,p 2 /X 2 } ^b.O || {6} (a.O A a.c.O), 

and 

C XuX2 { Pl /X 1 ,p 2 /X 2 } ((a.O A (Y\Y = a.Y))Da.b.O) || w (0 A c.0). 

These visible transitions starting from C Xl , X2 {p\/ X\ ,p 2 /X 2 } are activated by three 
distinct events. Clearly, both the context C XltX2 and the substitution p\ contribute to 
the first transition, while two latter transitions depend merely on the capability of C Xl t x 2 
and pi^ respectively. These three situations may be described uniformly in the lemma 
below. Here some additional properties on contexts are also listed in (CP-a-4), which will 
be useful in the sequel. 

Lemma 5.9. For any a £ Act, C x and p, if C x {p/X} — > r then there exist C'~, C'~ ~ 
and C'~ ~ with X n Y = satisfying the conditions below: 
(CP-a-1) C X ^C'~; 

(CP-a-2) for each Y £ Y, Y is 1-active in C'~ ~ and C'^ ~; 

(CP-a-3) there exist iy^<\X\ with Y £ Y such that 
(CP-a-3-i) C'~ ~{X iY /Y} = C'~; 

(CP-a-3-ii) there exist p' Y with Y £ Y such that p lY p' Y and r = C"~ y {p/X, p' Y /?}; 

(CP-a-3-iii) for any <f with \q\ — \X\ and q' such that |g'| = \Y\ and q' Y with 

Y G Y, if C x {q/X} is stable then C x {q/X} C"~ ~{q/X, g^/?}; 

(CP-a-4) for each X £X, 

(CP-a-4-i) the number of occurrences of X in C"~ ~ is not more than that in C'~ ~; 
(CP-a-4-ii) if X is active in C'~ ~ then so is it in C"~ ~ ; 

X ,Y X ,Y 

(CP-a-4-iii) if X does not occur in any scope of conjunctions in C x then nor does it 

in cy. 

Proof. It proceeds by induction on the depth of the inference of Strip(VcLL R , McLL n ) H 
C x {p/X} -^4 r. Due to C x {p/X} -f^, it is impossible that C x = B x V D^. Thus we 
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can distinguish seven cases depending on the form of C^. 
Case 1 is closed. 

Set C'~ = C'~ ~ = Cy and C"~ ~ = r with Y = 0. Clearly, these contexts realize 

X X,Y X x,Y - 7 

conditions (CP-a-i) (1 < i < 4) trivially. 

Case 2 = X io with i < \X\. 

Put C'~ = X io and C'~ ~ = C"~ ~ = Y with Y £ X. Then (CP-a-i) (1 < i < 4) follow 
immediately, in particular, for (CP-a-3), we take iy = io- 

Case 3 = a.B^. 

Then a = a and r = Put C"~ = C"~ - = a.5 ? and C'i - = S ? with 

Y = 0. Obviously, these contexts are what we seek. 

Case 4 = 

W.l.o.g, suppose that the last rule applied in the inference is 

B^{p/X}^r, Dx{p/X} A 
B^p/XjnDjj {p/X} -±> r 

By IH, for the a-labelled transition B^{p/X} r, there exist £? ~ ~ and £?~ ~ 
with X n y = that satisfy (CP-a-1) - (CP-a-4). Set 

C'~ — B^jf.C^ — and - 4 fl£ 

Then it is not difficult to check that, for the a-labelled transition C^{p/X} r, these 
contexts above realizes (CP-a-1) - (CP-a-4), as desired. 

Case 5 = B^ A D^. 

In this situation, the last rule applied in the inference is 

B^p/X} -£» ruDxjp/X} ^ r 2 
%{p/X} A ^{p/X} AnArj 

and r = n A r 2 . Then by IH, there exist B'~ - and B"~ ~ with X n Y = and, D'~, 
D'~ ~ and D"~ ~ with X n Z = that realize (CP-a-1,2,3,4) for two a-labelled transi- 
tions involving in premises, respectively. W.l.o.g, we may assume Y C\ Z = 0. Then it is 
straightforward to verify that, for the a-labelled transition C^{p/X} — ^ r, the contexts 

C 'x = B 'x A D 'x> C kv - B 'x.y A D 'x.z and C 'h = B 'h A D 'h with ^ ?U ^ 
realize (CP-a-1) - (CP-a-4), as desired. 

Case 6 = B^ \\a D^. 

Then the last rule applied in the proof tree is one of the following: 
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(6 .1) B ^,^ ri ffiff } -; r2 with a G A; 

(6.2) B^/X^D^/X}^ 

V > B s {p/X}\\ A D^{p/X}^r'\UD^{p/X} ? ' 

(6.3) D K ip/Z}^r>,BzWX } ^ ^ A 

Among them, the argument for (6.1) is similar to one for Case 5. We shall consider the 
case (6.2), and (6.3) may be handled similarly. In such situation, r = r' \\a D^{p/ X}. 
Moreover, for the a-labelled transition B^{p/X} r', by IH, there exist B'~, B'~ ~ 

and B"~ ~ with ln? = {) that satisfy (CP-a-1) - (CP-a-4). Put 

C 'x = B 'xh D^Cy 4 B y \\ A and C'L ~ 4 B y \\ A % . 

Next we want to show that these contexts realize (CP-a-1) - (CP-a-4). 
(CP-a-1) It is obvious because of B^ ^ B'~. 

(CP-a-2) For each Y G Y, since Y is 1-active in B'~ ~ and B'~ ~, so is it in C'~ ~ and 
C'~ ~ because of X n Y = 0. 

(CP-a-3) By IH, there exist iy < |-^| with Y G Y which realize subclauses (i)(ii)(iii) 
in (CP-a-3). In the following, we will verify that these iy also work well for the induction 
step. Clearly, it follows from B'~ ~{X iY /Y\ = B'~ and X n Y = that C'~ ~{x7 Y IY) = 
C^. Hence these iy satisfy the subclause (CP-a-3-i) for the induction step. Moreover, 
due to r' = B'~ ~{p/X,p^/Y} for some p' Y (Y G Y) with p iy -A p' Y and X n Y = 0, we 

have r = r' \\ A D^{p/X} = C't ~{p/X,p Y /Y}, that is, they realize (CP-a-3-ii) for the 
induction step. Finally, to verify that these iy also meet the challenge of (CP-a-3-iii), we 
assume that q and q' be any tuple such that \q\ = \X\, q iv q' Y for each Y G Y and 
Cj^{q/X} is stable. So, B^{q/X} and D^{q/X} are stable. Further, since B"~ ~ satisfies 

(CP-a-3-iii) and a (£ A, it is easy to obtain that C^{q/X} ~{q/A, g^/Y}. 

(CP-a-4) All subclauses immediately follow from IH and constructions of C'~, C'~ ~ 
and Cy. 

Case 7 C^ = (Y\E). 

Clearly, the last rule applied in the inference is 

(Y\E){p/X} r 

For the transition (t Y \E){p/X} r, by IH, there exist C^, C'~ ~ and - with 

X n Y = that satisfy (CP-a-1) - (CP-a-4). It is trivial to check that these contexts are 
what we need. □ 



Clearly, whenever all free variables occurring in Cjj are guarded, any action labelled 
transition starting from C^{p/ X} must be excitated by itself. 
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Lemma 5.10. Let C x be a context such that X is guarded for each X £ X. If 
C x {p/X} —i r then there exists Bg such that r = B x {p/X} and C x {q/X} 
B x {q/X} for any q. 

Proof. Firstly, we handle the case a = t. For the transition C x {p/X} — —> r, either 
the clause (1) or (2) in Lemma [5.61 holds. It is a simple matter to see that the clause 
(1) implies what we desire. The task is now to show that the clause (2) does not hold 
for such transition. On the contrary, assume that the clause (2) holds. Then there exist 
C'~, C'~ and io < \X\ satisfying (P-r-1,2,3,4). For each Id, since it is guarded in 
C x , by Lemma [5T2f3) and (P-r-1), so is it in C'~. Hence a contradiction arises due to 
(P-t-3), as desired. 

Next we treat another case a E Act. By Lemma 1531 for the transition C x {p/X} r, 
there exist C'~, C'~ ~ and C"~ ~ realizing (CP-a-1) - (CP-a-4). Clearly, if Y = then 
C'~ ~ is exactly one that we need. Thus, to complete the proof, it suffices to show that 

Y indeed is empty. Since X is guarded in C x for each lei and C x ^ C'~ (i.e., (CP- 
a-1)), by Lemma HT2T 3). all occurrences of free variables in C'~ are guarded. Moreover, 
since C'~ ~ satisfies (CP-a-2) and (CP-a-3-i), we get Y — 0, as desired. □ 

Analogous to Lemma 15.61 and 15.81 a particular instance of Lemma 15.91 is given as 

Lemma 5.11. For any Y, E with Y — ty £ E and context Cx with at most one 
occurrence of the unfolded variable X, we have 

(1) if C X {(Y\E)/X} q then there exists B x such that 

(1.1) q = B X {(Y\E)/X}, 

(1.2) C x {(t Y \E)/X} B x {(t Y \E)/X}, and 

(1.3) X occurs in Bx at most once, moreover, such occurrence is unfolded; 

(2) if C x {{t Y \E)/X} q then there exists B x such that 

(2.1) q = B x {(t Y \E)/X}, 

(2.2) C X {(Y\E)/X} B X {(Y\E)/X}, and 

(2.3) X occurs in Bx at most once, moreover, such occurrence is unfolded. 

Proof. We handle only item (1), similar arguments apply to (2). Let Cx{{Y \E)/X} 
q. Then, by Lemma l5Jl there exist C' x , C ~ and C" ~ with X £ Z that satisfy (CP-a-1) 
- (CP-a-4). Since C X {(Y\E)/X} is stable,' by LemmaEH so is C x {(t Y \E) / X}. 

If Z = 0, it follows trivially by (CP-a-3-iii) that C x {(t Y \E)/X} C" x ~{{t Y \E)/X}, 
moreover, by (CP-a-1), (CP-a-3-i), (CP-a-4-i) and Lemma f5.2( l). there is at most one 
occurrence of the unfolded variable X in C" ~. Therefore, C" x ~ is exactly the context 
that we need. 

We next deal with another case Z ^ 0. Since C' x satisfies (CP-a-1), by Lemma l5~2T l). 
there is at most one occurrence of the unfolded variable X in C' x . Then it follows from 
(CP-a-2), (CP-a-3-i) and (CP-a-4-i) that \Z\ = 1 and X £ FV{C" X ~). So, due to (CP- 
a-3-ii), there exists q' such that 

(Y\E) -A q 1 and q = C' X ~{(Y\E) / X, q'/Z}. 
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Hence (t Y \E) q' . Then C x {(t Y \E)/X} C» ~{(t Y \E)/X, q'/Z} by (CP-a-3-iii) 
and C x {(t Y \E)/X} Thus q = C" ~{{t Y \E) I X,q' IZ] because of X $ FV(C" -). 
Then it is easy to check that Bx = q is exactly what we seek. □ 

5.3. More on unfolding 

Based on the result obtained in the preceding subsections, we shall give a few further 
properties of unfolding. We first want to indicate some simple properties. 

Lemma 5.12. The relation ^ satisfies the forward and backward conditions, that is, 
for any a G Act T and p, q such that p ^ q, we have 

(1) if p p' then q q' and p' ^ q' for some q'; 

(2) if q then p p' and p' ^ g' for some p' . 

Proof. (1) Assume p ^ q and p p' . Clearly, p ^>„ q for some n. It proceeds by 
induction on n. For the induction base n = 0, it holds trivially. For the induction step 
n = k + 1, we have p r 9 for some r. By IH, r r' and p' ^> r' for some 
r'. Moreover, for r ^1 q, by Lemma [5.11 15.8IT 1) and 15. 1 lT l V there exists q' such that 
q — — >• q' and r' ^ q' . Obviously, we also have p' ^ q' . 

(2) Similar to item (1), but applying Lemma 1575^ 2) and !5.1lt 2) instead of Lemma fSTST l ) 
andEHIl). ' □ 

Similar result also hold w.r.t =^4> |, that is 

Lemma 5.13. For any p, q such that p ^ q, we have 

(1) if p =^=> \p' then q ==> \q' and p' ^ q' for some 

(2) if q =^=> |g' then p |g' and p' ^ g' for some p' . 

Proof. By applying Lemma 15.121 finitely times. □ 

In fact, for any p, q such that p ^ q, it is to be expected that p =rs q. To verify it, we 
need to prove that p G F if and only if g G F. The next lemma will serve as a stepping 
stone in proving this. 

Convention 5.1. The arguments in the remainder of this paper often proceed by dis- 
tinguishing some cases based on the last rule applied in an inference. For such argument, 
since rules about operations A, V, \\a and □ are symmetric w.r.t their two operands (for 
instance, Rpn and Rpi2, Ra>4 and Ra$, and so on), we shall consider only one of two 
symmetric rules and omit another one. 

Lemma 5.14. For any Y, E with Y = t Y G E and context Cx with at most one 
occurrence of the unfolded variable X, C X {(Y\E)/X} G F iff C x {(t Y \E)/X} G F. 

Proof. We give proof only for the implication from left to right, the converse impli- 
cation may be proved similarly and omitted. Assume Cx{(Y\E) / X} G F. It proceeds 
by induction on the depth of the inference Strip(PcLL a , Mcll r ) l~ Cx{(Y\E) /X}F, 
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which is a routine case analysis on the form of Cx ■ We give the proof only for the case 
Cx = Bx A Dx, the other cases are left to the reader. In this situation, the last rule 
applied in the inference is one of the following. 

Bx{(Y\E)/X}F 



Case 1 B x {{Y\E)/X}hD x {(Y\E)/X}F- 

By IH, we get B x {(t Y \E)/X} G F. Hence C x {(t Y \E)/X} G F. 

p„ qp o B x {{Y\E)/X}-^r,D x {{Y\E)/X} 7 ^,C x {(Y\E)/X} 1 /^ 
^ dt,e Z B X {(Y\E)/X}AD X {(Y\E)/X}F 

By Lemma EH and EIU we have B x {{t Y \E)/X} D x {(t Y \E)/X} A and 

{<*r|£>/*> A. So, C X {(^|F)/*} e F. 

p o Cx{{Y\E)/X}-^s,{rF:Cx{(Y\E)/X}-^r} 
^ dbe Cx{<y|S)/^}-F 

Then C x {(t Y \E)/X} by Lemma E3fl) and OH 1). Assume Cx{(ty|F}/X} 
q. Thus it follows from Lemma l5~ffl 2) and !5.1ll 2) that there exists C' x with at most one 
occurrence of the unfolded variable X such that 

C X {{Y\E)/X} C" X {{Y\E)/X} and q = C' x {(t Y \E)/X}. 

Then, by IH, q = C' x {{t Y \E) / X} G F. Hence C x {(iy|F)/X} G F by Thcorem[42] 

p„„ p A {rF:C x {(Y\E)/X}=U\r} 
^ase t Cx{<V|£')/X}-F 

Assume Cx{(t Y \E)/X} ==> \t. Repeated application of Lemma I5.8f 2) enables us 
to get C X {(Y\E)/X} =^ \r, r = C' X {(Y\E)/X} and * = C' x {{t Y \E) / X} for some 
r and context Cy with at most one occurrence of the unfolded free variable X. Since 
r = C' X {(Y\E)/X} G F, we have t € F by IH. Then C x {(iy \E) / X} G F by TheoremgjH 

□ 

Next we can show that the relation ^ preserves and respects the inconsistency. 

Lemma 5.15. For any p, q, if p ^ g, then p G F iff q G F. 

Proof. Suppose p ^ q. Hence p ^ n q for some n. Then, using Lemma 15.11 and 15.141 
the proof is straightforward by induction on n. □ 

We now have the below assertion of the equivalence of p and q modulo =rs whenever 
P ^ q- 

Lemma 5.16. If p\ ^> p2 then p\ —rs P2, in particular, p\ ~rs Vi whenever p\ -f-^t. 

Proof. We only prove p\ C P2 whenever pi ■/—>, other proofs are straightforward 
and omitted. Set 

ft = {(P, q) -P^ q and p t^}. 
It suffices to prove that 1Z is a stable ready simulation relation. Suppose (p, q) G 7?.. Then, 
by Lemma [5.121 and I5.15[ it is evident that such pair satisfies (RSI), (RS2) and (RS4). 
For (RS3), suppose p ==>f \p' ■ Then p -^f p" ===>f \p' for some p" . By Lemma [5.121 
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and !5.15l there exists q" such that q -^->f l" an d p" ^ <?"• Further, by Lemma [5.131 and 
[5~T5l p' ^ g' and <?" =^> F W for some g'. Moreover, (p' , q') £ 7^, as desired. □ 

In the following, we shall generalize Lemma 15.61 to the situation involving a sequence 
of T-labelled transitions. Given a process C^{p/ X}, by Lemma 15 .61 any r-transition 
starting from C^{p/X} may be caused by itself or some pi. Thus, for a sequence of 
r-transitions, these two situations may occur alternately. Based on Lemma l5.6( we can 
capture this as follows. 

Lemma 5.17. For any and p, if C^{pj X} =^4> r then there exist C'~ ~, iy < \X\ 
and p' Y with Y £ Y such that 

(MS-t-1) X n Y = and F is 1-active in ~ for each ye?; 

(MS-t-2) PlY =^> p y for each F e ? and r = C'~ ~{p/X,p^/Y}; 

(MS-t-3) for any q and q' Y with \q\ = \X\ and Fg?, 

(MS-r-3-i) if q iy q' Y with Y £Y then C^{g/X} C'~ ~{q/X, q^/Y}; 

(MS-r-3-ii) if q iY =^> g y with Y £ F then C x {q/X} =^> 

(MS-r-4) if C 9 is stable then so is C'~ ~ and C^{q/X} ^ C"~ ^{o/X, g~ IY\ for any 

" .A , Y " .a,f 

5"; 

(MS-t-5) for each 1 e 1, if Z is strongly guarded in then so is it in C'~ ~ and 
X X iY for each Y £ F;^ 

(MS-r-6) for each X £ X (or, Y £ F), if X (Xi Y , respectively) does not occur in any 
scope of conjunctions in then nor does X (F, respectively) in C'~ ~; 

(MS-t-7) if r is stable then so are C'~ ~ and p' Y for each Y £ Y . 

Proof. Suppose Cy{p/X}(— T -^-) n r{n > 0). We proceed by induction on n. For the 
inductive base n = 0, the conclusion holds trivially by taking C'~ ~ = with Y = 0. 

For the inductive step, assume Cjf {p/X}(^) fe s r for some s. For the transition 
C k {p/X}(^) k s, by IH, there exist C'~~,i Y <\X\ and (F £ Y) such that 

~,i y andp y with F e F realize (MS - r - 0(1 <l<7). ([BTTTlll 

In particular, we have s = C~ ~{p/X,p' y /F} due to (MS-r-2). Then, for the transition 

s — > r, either the clause (1) or (2) in Lemma 15.61 holds. The argument splits into two 
cases. 

Case 1 For the transition s — — > r, the clause (1) in Lemma [5761 holds. 

That is, for the transition C'~ ~{p/X,p Y /Y} = s r, there exists C'~ ~ satisfying 

(C-r-1,2,3) in LemmaEH We shall check that C"~ ~, W and p\ realize (MS-t-1) - (MS- 

r-7) w.r.t C^{p/X}(^) k+1 r. 

Since C'~ ~ satisfies (MS-r-1,5,6), it follows that C'!~ ~ and realize (MS-r-1), (MS- 
r-5) and (MS-r-6) due to (C-r-3-i), (C-r-3-iii) and (C-r-3-iv) respectively. Moreover, as 
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C'~ ~ satisfies (C-r-1) it follows immediately that (MS-r-2) holds. Since C'~ ~ satisfies 
(C-t-2), by Lemma C'~ ~ is not stable. Then nor is because C'~ ~ satisfies 
(MS-r-4). Thus, G"~ ~ satisfies (MS-r-4) trivially. 

Next we verify (MS-r-3). Let q be any processes with \q\ = \X\ and qt Y ==> q' Y with 
Y e Y. 

(MS-r-3-i) Since C'~ ~ satisfies (MS-r-3-i), we have 

C s {q/X} =U t ^ C'~ ~{q/X,q^/Y} for some t. 

Moreover, we have C'~ ~{q/X, q£/Y} C"~~{qjX 1 q T Y lY} due to (C-r-2). Then it 
follows from Lemma 15.121 that 

t t' e=> C'~ Y {q/X,q^/Y} for some t' . 

Therefore, C^{q/X} =^> t t' ^ C| as desired. 

(MS-r-3-ii) It is straightforward as C'~ ~ satisfies (MS-r-3-ii) and C"~ ~ satisfies (C- 
r-2). 

(MS-t-7) Suppose r = C"~ ~{p/X,p' Y /Y} Then, since C"~ ~ satisfies (MS-r-1), 
by Lemma T5.4I and [5771 it is easy to see that both C'~ ~ and p' Y with Y G Y are stable. 

Case 2 For the transition s — — ^ r, the clause (2) in Lemma holds. 

Then there exist i < \X\ + \Y\, C"~ ~(= C'l x - y~ y~ ) and C% ~ J= 

C Xi,...,x ~ ,y~ ,...,y~ - ,z) with Z gXUY satisfying (P-r-1) - (P-r-4). In particular, 
by (P-r-3), 1X1+1 

I ^.z^/^' if 1^1 + 1 < *o < |*| + 

For the case \X\ + 1 < io < \X\ + \Y\, by (P-r-2), there exists p' such that 

V ' Yq p' and r = C'~ Y Z {p/ X,p^r/Y,p'/Z}. 

Moreover, since Y io is 1-active in C'~ ~, by (P-r-1), we have C'~ ~ = C"~ ~. Further, since 
Z is 1-active in C'~ ~ and C"~ ~ = C"~ ~ {Yi /Z}, it is easy to see that YL does not 
occur in C'~ ~ . Hence 

r = Cyip/X^lp'/p'yJ/Y} ee C'^ Y {p/X,pl[p'/p' Y J/Y}. 

Then it is not difficult to check that C'~~ : p' Y [p'/p Y } and iy with Y S Y realize 

(MS-r-/)(l < I < 7) w.r.t the transition G% {p/X}(^) k+1 r, as desired. 

For the case 1 < «o < \X\, by (P-r-2), pi p" for some p" such that r = 

C'l Y Z {p/X > p~ Y /Y,p"/Z}. Set 

A ■ j / A // 
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In the following, we intend to verify that C'~ ~ , ijj (U E Y U {Z}) and \Y\ + 1-tuple 

j^j with U E Y U {Z} realize (MS-r-1) - (MS-r-7) w.r.t C R {p/X}{^) k+l r. 

(MS-r-1) By (P-r-1), we have C'~~^C'L ~. Moreover, since C'~ ~ satisfy (MS-r-1), 

by Lemma lOtl ). Y is 1-active in C'~ ~ for each Y EY . Further, by (P-r-3), each Y EY 
and Z are 1-active in C'~ ~ . 

(MS-t-2) It is straightforward. 

(MS-t-3) Let g be any processes with \q\ = \X\. 

(MS-r-3-i) Suppose q. tu =l» with U G Y U {Z}. Since C'~ ~ satisfies (MS-r-3-i), 
we have 

C R {q/X} =^ i ^ t^/y} for some t. 

It follows from g iz =^3> g^ that (— >) m q' z for some to > 0. We shall distinguish two 
cases based on to. 

For the case to = 0, we get q iz = q' z . Since C'~ ~ satisfies (P-r-1) and (P-r-3), we 
have 

C'~ ~{q/X,7 Y /Y} ^ C± >9 {q/X,Z/Y} = C'l 9z {q/X,ql/Y,q' z /Z}. 

Therefore C R {q/X} t ^ C'~ ~{q/ X , q^/Y} = C% ~ Jq/ 'X J Y /Y ,q' z / ! Z}, as de- 
sired. 

For the case to > 0, i.e., qi z — ^ q" => q' z for some g", by (P-r-4), we obtain 
C'~ Y {q/X,^ Y /Y} -L* C'l~ z {q/X^/Y,q"/Z}. 
Moreover, since Z is 1-active, by Lemma I5T41 we get 

C'l Y Z {q/X,Z/Y,q"/Z} =k> C'l~ z {q/X^/Y,q' z /Z}. 

Then, by Lemma [5.13[ it follows from t ^ C'~ ~{q/X,q' Y /Y} that there exist t' such 
that 

t=^t'^ C'l Y Z {q/X^/Y,q' z /Z}. 

Consequently, C R {q/X} t =^ f C'~~ z {q/X, q^/Y, q' z /Z}. 

(MS-r-3-ii) Suppose q iv q'jj with U € Y U {Z}. Since C~ ~ satisfies (MS-r-3-ii), 
we have 

C R {q/X}^C'^ Y {q/X,Z/Y}. 
Moreover, q iz — > q" =^> q' z for some q" because of qt z q' z . Hence by (P-r-4) 

C'~ Y {q/X,Z/Y} -A C'l~ z {q/X^/Y,q"/Z}. 
Further, since Z is 1-active, it follows from Lemma T5. 41 that 

C'l Y Z {q/X,^y/Y,q"/Z} =k> C'l~ z {q/X,qX/Y,q' z /Z}. 

Consequently, C R {q/X} =^> C'£ ~ Z {q/X, q^/Y, q' z /Z}, as desired. 

(MS-r-4) Assume C R is stable. By (MS-r-4), C'~ ~ is stable and for any q, C R {q/X} e> 
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C'~ y{q/X, q~ /Y}. Moreover, by Lemma EH it follows from C'~ ~ ^ C"~ ~ (i.e., (P- 
r-lj) and C'g~^{X iz /Z} = C'L ~ (i.e., (P-r-3)) that C'g~ z is stable and ' 

C'f 9 {q/X,q~/Y} ^ Cf ? ^{g/X, fe/Y, q iz /Z}. 

(MS-r-5,6) By Lemma [5.2f 3)(5). they immediately follow from the fact that C'~ ~ 
satisfies (MS-r-5,6) and C'£~ z satisfies (P-r-1,3). 

(MS-t-7) Immediately follows from (MS-r-1), (MS-r-2) and Lemma El and E2 □ 

Lemma 5.18. For any p and stable context CV, if, for each i < \X\, pi =^4> \p^ then 
C^{p/X} =^=> \q for some q. 

Proof. By Lemma E3l and IB~27 4) . Cjj ^ C'~ for some C'~ such that each unguarded 
occurrence of any free variable in C'~ is unfolded. Moreover, since C x is stable, so is C'~ 

by C^{0/X} e±> C'~{0/X} and Lemma EI3 

Let C'~ ~ be the context obtained from C'~ by replacing simultaneously all unguarded 

and unfolded occurrences of free variables in X by distinct and fresh variables Y. Here 
distinct occurrences are replaced by distinct variables. Clearly, we have 

(1) for each Y G Y, there exists exactly one iy < \X\ such that C'~ = C'~ ~{X iY /Y}, 

(2) all variables in Y are 1-active in C'~ ~, and 

(3) C'~ ~ is stable. 

Then C^Vp/X} =t* C'~{p/X\ = C'~ ~{p/X,p~/Y}, and by Lemma El we obtain 

C'~ ~{p/X,p~/Y} =!» C'~ ~{p/X,pT/Y}. Further, since t% ~ and p^ are stable and 

Y contains all unguarded occurrences of variables in C'~ ~ , we get C'~ ~ {p/X, p' iv /Y} 

by Lemma E6l Hence, by Lemma [5. 131 C^{p/X} =^4> \q e> C'~ ~{p/X ,p' iY /Y} for some 
q. ^ □ 

Given a process C^{p/X} and its stable r-descendant r (i.e., C^{p/X} =^=> |r), in 
general there exist more than one evolution paths from C^{p/X} to r. Since each r- 
labelled transition in CLL# activated by a single process, a natural conjecture arises 
at this point that there exist some "canonical" evolution paths from C^{p/X} to r in 
which the context Cy itself evolves into a stable context then pi evolves. A weak version 
of this conjecture will be verified in Lemma 15.201 To this end, a preliminary result is 
given below. 

Lemma 5.19. Let t\,t2 be two terms and X a tuple of variables such that any recursive 
variable occurring in fj(with i = 1,2) is not in X, and let ax-0 be a tuple of processes 
with fresh visible action ax for each X E X. Then 

(1) if ti{a^0/X) = t 2 \ax~&lX\ then t x = t 2 ;_ 

(2) if ti{a~x~tt/X} Eh t 2 {a~x~X)/X} then h{r/X} =h < 2 {r/X} for any r. 

Proo/. (1) If FV(<i)nX = then t x {ax~S)/X} = h = h{ax~S) / X} . Further, since a x 
is fresh for each X G X, we have FV^) flX = I. Hence fi = t<x. In the following, we 
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consider another case FV(ti) We proceed by induction on t\. 

Case 1 1\ = Xi. 

Then 'X} = axt-0 = t 2 {ax-0/X}. Hence t 2 - X. t due to the freshness of a^- 

Case 2t\= a.s. 

So ti{ax-0/X} = a.s{ax-0/X} = t 2 {ax-0/X}. Since a ^ ax for each X 6 X, there 
exists s' such that t 2 = a.s' and s{ax-0/X} = s'{ax-0/X}. By IH, we have s = s'. 
Hence t\ = t 2 . 

Case 3 t x = s\ s 2 with e {V, □, |U, A}. 

Then £i{ax-0/X} = si{(^0/X} s 2 {S^0/X} = tz{axS)/X}. Since Ox-Ojlo not 
contain 0, there exist Si,s 2 such that i 2 = s i s 2: s i{ a x-0/^} = s[{a X -0/X} and 
S2{<Jx-0/X} = s' 2 {ax-0/X}. Hence s± = and s 2 = s' 2 by applying IH. 

Case 4 ^ ee (Yj£) for some E(V) with Y £ V. 

Then ^{ax-O/X} ee (Y\E{a^O)/X}) = t 2 {a~x~X)/X}. So, i 2 = for some 25' (V) 

such that for each Z E V, t z {a X -0/X} = t' z {a X -0/X} where Z — t z E E and 
Z = t' z E E'. By IH, t z = i' z for each Z E V. Thus t x = (Y\E) = (Y\E') ee t 2 . 

(2) For the case FV(ti)DX = 0, since one-step unfolding does not bring any fresh actions, 
we have FV(t 2 ) n X =_0. Thus, ii ee ti{a^0/X} ^i t 2 {ax~A/X} = *2, and Jience 
ii ee ti{r/X} ee>i t 2 {r/X} = ta for any r. Next we consider another case FV(ti)P\X ^ 0. 
It proceeds by induction on t\. This is a routine case analysis on the format of ti, we 
handle only the case ii ee (Y\E). 

In this case, £i{ax-0/X} ee (Y |i?){ax-0/X}. By Def. 15.21 the unique result of one- 
step unfolding of (Y\E}{ax~^/X} is (iy|22}{a]^Q/X} where Y = t Y E E. Thus, we 
get (t Y \E){ax-0/X} ee t 2 {ax-0/X}. By item (1), we have (t Y \E) = t 2 , and hence 
h{r/X} e^! \t Y \E){r/X} ee t 2 {f/X} for any r. □ 

Having disposed of this preliminary step, we can now verify a weak version of the 
conjecture above mentioned, which is enough for the aim of this paper. At present, we 
do not know whether this result still holds if the requirement (1) in the next lemma is 
strengthened as C x {p/X} D x {p/X} =^=> |r. 

Lemma 5.20. For any C x and p, if C x {p/X} \r then there exists a stable context 
D x such that 

(1) C x {p/X} D x {p/X} =^\r' E^r for some r', and 

(2) C x {q/X} D x {q/X} for any q with \q\ = \X\. 

Proof. Suppose C x {p/X}(-^) n \r. It proceeds by induction on n. For the inductive 
base n — 0, it follows from C x {p/X} = r /h- that C x is stable by Lemma [5.71 Then 
it is straightforward to verify that C x itself is exactly what we seek. For the inductive 
step, assume C x {p/X} t(— ^-»-) fc |r for some t. Then, for the r-labelled transition 
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Cj({p/X} t, either the clause (1) or (2) in Lemma [5T61 holds . For the first alternative, 
it is easy to handle and omitted. Next we consider the second alternative. 

In such situation, there exist C~, C"~ with Z 4 X and io < \X\ that satisfy (P-r-1) 

jC JC ,Z 

- (P-r-4). By (P-t-2), we have 

t = C"~ z {p/X lP '/Z} for some p' with p ia p. 

Then, for C'~ z {p/X,p'/Z}(-^) k \r, by IH, there exists a stable context D'~ such that 

C'^ z {p/X,p'/Z} =l» D'~ z {p/X,p'/Z} =£» \r' ^ r for some r' J53DH) 
and for any q' and q, we have 

C'L z {q/X, q'/Z} D'~ z {q/X, q'/Z}. |12) 

In particular, we have C'~ z {ax-0/X, az-O/Z} =>■ D'~ z {ax-0/X : az-O/Z} where dis- 
tinct visible actions ax and az are fresh. For this transition, applying Lemma lipTBl finitely 
times (notice that, in this procedure, since ax-0 and az-0 are stable, the clause (2) in 
Lemma 15.61 is always false), then by clause (1) in Lemma 15.61 we get the sequence below 

C'~ z {a~x~A/X,a z .0/Z} = C°~ z {a^0/X, a z .0/Z} C 1 - z {a^0/X,a Z -0/Z} 

■ ■ • C% z {alT0/X, az.O/Z} = D'~ z {a~x~X)/X, az-O/Z}. 

Here n > and C~ satisfies (C-t-1,2,3) for each 1 < i < n. Moreover, since Z is 
l-active in C'~ , by (C-r-3-i), so is Z in Cj~ . On the other hand, by Lemma T5.191 we 
have C~ = D'~ . Hence we can make the conclusion below 

X,Z X,Z 

Z is l-active in D'~ z< ((001 3) 
Since C~ and C'~ satisfy (P-r-1) and (P-t-3), for any s, we get 

C x {s/X} ^ C'~{s/X} = C'^ z {s/X,s io /Z}. (12014) 

In order to complete the proof, it suffices to find a stable context D y satisfying conditions 
(1) and (2). In the following, we shall use ax-0 again to obtain such context. 
Since ax -0 and D'~ are stable, by (|5.20I 2). we get 

C'^ z {alO)/X,a Xio .O/Z} \D' x>z {alO)/X,ax io .O/Z}. 

Moreover, by (1001 4). we have C'~{a~x~X)/X} = C"~ Jax~X)/X,a Xtn -0/Z}. Thus, it fol- 

X X ,Z o 

lows that 

C'~{a~x~ti/X} ^> \D'~ z {ala)/X,ax i0 .Q/Z}. 
Then, since ax-0 are stable, by Lemma 15.171 there exists a stable context B x such that 
Bz {a~x~X>/X} = D'~ z {a~x~S)/X, a x , .0/Z} (H20J5) 

and 

C'~{s/X} =^> %{s/X} for any s. §M 6) 
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On the other hand, by fOUl 4) and LemmaEH we have C^ia^O/X} ^ C'~{a^X)/X} 
and Cx{a^S)/X} =k> \t' ee> D'~ z {a~^S)/X,ax Hr 0/Z} for some t' . Further, since a~x~X) 
are stable, by Lemma T5. 171 there exists a stable context such that 

t' = D x {a~x~X)/X} ^ D'~ z {a~^X)/X, a Xi0 -0/Z} §M7) 

and 

C x {s/X} =i» Dx{s/X} for any s. $5M$) 

Notice that, (I5.20I 8 1 ) comes from (MS-r-3-ii) with Y = 0. In the following, we intend to 
prove that D x is what we seek. It immediately follows from (I5.20I 8 1 ) that D x meets the 
requirement (2). We are left with the task of verifying that D x satisfies the condition (1). 
So far, for any s, we have the diagram below, where the first line comes from (|5.20I 4). 

C X {S/X} ^ C'~{s/X} = C'i z {s/X,s i0 /Z} 

iiebv |1 8) Jlebv (1001 6) He by (15~2ljl 2) 

D^{s/X} ^ B x {s/X] = D'~ z {s/X,s lQ /Z} 

Here the last line in the above follows from (|5.20I 7) and (I5.20I 5 1 ) using Lemma 15.191 
Further, by Lemma T5. 41 and pi — ^ p' , it follows from (|5.201 1) and (15.201 3) that 

B x {p/X} = D' xz {p/X, Pl jZ} -A D' xz {p/X,p'/Z} ^ \r> ^ r. 

Finally, since D x {p/X} B x {p/X}, by Lemma EH we get D x {p/X} =^> \r" ^ 
r' ^ r for some r", which, together with C x {p/X} D x {p/ X}, implies that the 
stable context D x also meets the requirement (1), as desired. □ 

The result below asserts that there exist another "canonical" evolution paths from 
C x {p/X} to a given stable T-descendant r. For these paths, an unstable Pi evolves first 
provided that such pi is located in an active position. 

Lemma 5.21. For any C x and p, if C x {p/X} =^> \q and Xi is 1-active in C x for some 
i < 1^1, then there exists p' such that pi =^> \p' and C x {p/X} C x {p[p' /pij/X} =^> 

Proof. Suppose C x {p/X}(—^) n \ q for some n > 0. We shall prove it by induction on n. 
For the inductive base n = 0, we have pi -f-^r by Lemma l5.41 and hence it holds trivially 
by taking p' = pi. For the inductive step n = k + 1, suppose C x {p/X} — r{-^-) k \q 
for some r. For the transition C x {p/X} r, either the clause (1) or (2) in Lemma [STEl 
holds. 

For the first alternative, there exists a context C'~ such that 

(1.1) X t is 1-active in C'~ (by (C-r-3-i)), 

(1.2) r = and 

(1.3) C x {s/X} C"~{s/X} for any s. 
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By (1.1), we can apply induction hypothesis for the transition r = C'~{p/X}(^^) k \q, 
and hence there exists p' such that Pi \p' and C'~{p/X} C '~{p {p'/pA/X} \q. 

X X 

On the other hand, since Xi is 1-active in and pi \p l , we have C^{p/X} =^=> 
C^p^'/pi]/!} by Lemma El Moreover, Cj{p[p' / Pl ]/X} ^ C'~{p\p' / Pi \/X} by 
(1.3). Therefore, C% {p/X} =^> {p [p'/pJ/X} -A C^{p [p'/ Pl ]/X} =^> |g, as desired. 

For the second alternative, there exist C'~, C"~ and io < \X\ such that 

.a X ,z 

(2.1) Z is 1-active in C"~ _ 

x ,z 

(2.2) r ee C£^{p/X, p^/Z} for some p< with Pl0 ^ p' lQ , and 

(2.3) C^{s/X} Z {s/X, s'/Z} for any s and s' with s l0 s'. 

For the case io = i, we have C x = C'~ by (P-t-1), and hence r = (7^ {p [p- Q /pi]/A} by 
(2.2) and (P-r-3). For the transition r = C^{p[p' io /pi]/X}(-^) k \q, by IH, there exists 
p" such that p' lQ ^ \p" and CzWJPi]/X} C^{p\p"/p i }/X} =^ \q. Hence 
Pic ^P'i =^ ¥' and C^p/X} -A C^p^/p*]/*} ^ ^{pK/pJ/I} ^ |g. ^ 
Next we consider another case iq ^ i. Then for the transition r = C'~ z {p/ X ,p' ig /Z}( — > 

) k \q, by IH, there exists p' such that pi =^=> \p' and 

C'L ^/X,p'jZ} C'L z {p[p'/ Pl ]/X,p'jZ} =±> \ q . 

On the other hand, since Xi is 1-active in and pi ==>■ |p', by Lemma |5.4[ we obtain 
C^{p/A} =^ ^{pIp'MI/X}. Moreover, C x {p[p' / Pl ]/X} C£ z {p [p'/p^/X^/Z} 
by (2.3). Thus 

as desired. □ 



6. Precongruence 

This section intends to establish a fundamental property that Qrs is a precongruence, 
that is, it is substitutive w.r.t all operations in CLL^. This constitutes one of two main 
results of this paper. Its proof is far from trivial and requires a solid effort. As men- 
tioned in Section 1, a distinguishing feature of LLTS is that it involves consideration of 
inconsistencies. It is the inconsistency predicate F that make everything become quite 
troublesome. A crucial part in carrying out the proof is that we need to prove that 
Cx{q/X} £ F implies Cx{p/X} G F whenever p ^rs q- Its argument will be divided 
into two steps. First, we shall show that, for any stable process p, Cx{r.p/ X} is in accor- 
dance with Cx{p/X} in the consistency. Second, we intend to prove that Cx{q/X} E F 
implies Cx{p/X} € F whenever p and q are uniform w.r.t stability and p Qrs Q- 

Definition 6.1 (Uniform w.r.t stability). Given two tuples p and g with \q\ = |pj, 
they are said to be uniform w.r.t stability, in symbols ptxq, if they are component-wise 
uniform w.r.t stability, that is, p; is stable iff g, is stable for each i < \p\. 
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An elementary property of this notion is given below. 

Lemma 6.1. The uniformity w.r.t stability are preserved under substitutions. That is, 
for any p, q and Cg, if p cx q then C x {p/X} cx C x {q/X}. 

Proof. Immediately follows from Lemma 15.61 □ 

Notation For convenience, given tuples p and q, for R G {b=^s,IZ ,==> |,=}, the 
notation pRq means that \p\ = \q\ and PiRqt for each i < \p\. 

Lemma 6.2. For any C x , p and q with p C^g q, if C^{p/X} and C x {q/X} are stable 
and C x {p/X} i F, then C^{p/A} iff C^q/X} for any a G Act. 

Proof. We give the proof only for the implication from right to left, the same argument 
applies to the other implication. Assume C x {q/X} q 1 . Then there exist C~, C'~ ~ 

and C"~ ~ with In? = 1 that satisfy (CP-a-1) - (CP-a-4) in Lemma l5Jl Hence, due 

to (CP-a-1) and (CP-a-3-i), there exist iy < \X\ with Y £ Y such that for any r with 
\r\ = \X\ 

C x {r/X} C'~{r/X] = C'~ 9 {r/X,f~/Y}. (Oil) 

In particular, by Lemma [5.12[ it follows from C x {p/X} /h> and C x {q/X} -f^t that 
both C'~ ~{p/X,pT Y /Y} and C'~ ~{q/X, qT Y /?} are stable. Then, for each Y G Y , both 
Pi Y and gi Y are stable by Lemma l5Tl and (CP-a-2). Moreover, by (16.2H 1 ) with r = p and 
Lemma 15 . 1 51 and IS~5l we have pi Y F with Y eY due to C x {p/X} F. Therefore, for 
each Y G Y , it follows from p Qrs 5 that pi Y C Oj y , and I(pi Y ) = I(qi Y ) because of 

p iY i F. Hence C x {p/X} by (CP-a-3-iii). □ 

In the following, we intend to show that, for any stable p, Cx{p/X} and Cx{j-vl X} 
are undifferentiated w.r.t consistency, which falls naturally into two parts: Lemma 16.31 
and 16.51 

Lemma 6.3. For any Cx and stable p, Cx{p/X} £ F implies Cx{r.p/X} £ F. 

Proof. Let p be any stable process. Set 

H = {B x {r.p/X} : B x {p/X} <fc F and B x is a context}. 

Similar to Lemma 14. 4[ it suffices to prove that for any t <E f2, each proof tree of tF 
has a proper subtree with the root labelled with sF for some s € fi. Suppose that 
C'x{t. P /X} G fi and T is any proof tree of Strip(V C LL R , M C llJ h Cx{r.p/A}F. 
Hence Cx {p/A} ^ F. We distinguish six cases based on the form of Cx- 

Case 1 Cx is closed or Cx = X. 

In such situation, it is easy to see that Cx{r.p/ X} ^ F. Hence there is no proof tree 
of Cx{t.p/X}F. Thus the conclusion holds trivially. 



Case 2 Cx = ot.Bx- 
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Then the last rule applied in T is ^g^ifx^F - Since °x{p/X} £ F, we get B x {p/X} £ 
F. Hence B x {r.p/X} G fi, moreover, the node directly above the root of T is labelled 
with B x {r.p/X}F, as desired. 

Case 3 C x = B x VL> X - 

Clearly, the last rule applied in T is % x J-{ t P J/^\vDx{t.p/x}f ■ Since C x{p/X} £ F, ei- 
ther B x {p/X} £ F or D x {p/X} £ F. W.l.o.g, assume B x {p/X} £ F. Then B x {r.p/X} G 
fi. Moreover, it is obvious that T has a proper subtree with the root labelled with 
B x {t. P /X}F. 

Case 4 C x = B x (D D x with G {□, \\ A }. 

W.l.o.g, assume the last rule applied in T is Bx ^ T p/x^}oDx{rp/x}F ■ ^ * s ey ident that 
B x {p/X} £ F due to C x {p/X} £ F. Hence B x {t. P /X} G fi, as desired. 

Case 5 C x = (Y\E). 

Then the last rule applied in 7~~ is 

(t Y \E){T.p/X\F , {rF : (yiSUr.p/X} |r} 

For the first alternative, since C x {p/X} = (Y\E){p/X} £ F, by Lemma [4TTT 8) . we 
get (t Y \E){p/X} £ F. Hence (t Y \E){t. P /X} G ft. 

For the second alternative, since C x {p/X} £ F, we get C x {p/X} =>f \q f° r some 
q. Moreover, by Lemma T5.f 7[ it follows from p that there exists a stable context C' x 
such that 

q = C' x {p/X} and C x {t. P /X} =!» C^{r.p/X}. (jOU) 
Further, by Lemma 15.181 and r.p ——¥ \p, we get 

C^-jr.p/X} =^> |s for some s. (|Q2) 

For the above transition, by Lemma f5 . 1 71 again, there exists C" ~ with X £ Z such that 

s = C'^{T.p/X,p/Z} and C' x {p/X} ^ C'^~{p/X,p/Z}. 

Thus, by LemmaEHl we have C" ~{p/X,p/Z} £ F because of q = C' x {p/X} £ F. Set 

Then it follows from C£'{p/X} = C" ~{p/X,p/Z} £ F that s = C'^{t. P /X} G fl 
Moreover, 7" contains a proper subtree with the root labelled with sF due to (|6.3I 1) and 
02). 



Case 6 C x = B x AD X . 

Clearly, the last rule applied in T has one of the following formats. 

p„„ p a i B x {r.p/X}F 
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Similar to Case 4, omitted. 

p aap a 9 B x {r.p/X}^T,D x {r.p/X} 7 ^,B x {T.p/X}/\D x {T.p/X} 7 ^ 
^ afee D ' Z Bx{r.p/X}AD x {r.p/X}F 

In such situation, Bx{r.p/X}, Cx and Bx are stable. Moreover, since p is stable, so 
is B x {p/X}. Due to CxOV^} ^ F, we obtain F^W^} ^ F. Then, by LemmalOJ it 
follows from p —rs t -P and Bx{r.p/X} — > that 

. (|6313) 

Similarly, it comes from Z?x{t.p/X} that 

D x {p/X} A • (E314) 

On the other hand, since Bx A Dx and p are stable, so is Bx{p/X} A Dx{p/X}. So, 
by (E313) and (|Ol4), we get C x {p/X} = Bx{p/X} A D x {p/X} € F by the rule Rp w , 
which contradicts that Cx{t.p/ X} 6 fi. Hence this case is impossible. 

Uase 0.6 Cx{r.p/X}F ■ 

The argument splits into two cases based on a. 

Case 6.3.1 a = r. 

We distinguish two cases depending on whether Cx is stable. 

Case 6.3.1.1 Cx is not stable. 

Since Cx{p/X} £ F, we have Cx{p/X} =^=>f \p' for somep'. Moreover, by Lemma r5.20[ 
there exist p" and stable C* x such that 

C x {p/X} ^ C x {p/X} \p" => P ' 

and 

C x {i/X} C* x {t/X] for any t. 
Further, since Cx is not stable and p >, by Lemma [5751 there exists C x such that 

C x {p/X} -A C* x {p/X} =1*. C x {p/JQ and C x {r.p/X} -A ^{r.p/X}. 

Since p' ^ F and p" ^ p', by Lemma T5. 151 we get p" ^ F. Together with the transitions 
C'x{p/X} C x {p/X} =^ |p", by Lemma @~2j this implies C x {p/X} £ F. Hence 
C x {r.p/X} e fi, and T has a proper subtree with the root labelled with C x {t.p/X}F. 

Case 6.3.1.2 Cx is stable. 

Due to Cx{t.p/X} — —> s, either the clause (1) or (2) in Lemma T5.6I holds. Since Cx 
is stable, by (C-r-2) in Lemma [5.61 it is easy to see that the clause (1) does not hold, 
and hence the clause (2) holds, that is, there exists C' x z with X ^ Z such that 

C x {r.p/X} C XiZ {T.p/X,p/Z} and C X { P /X} ^ C' x , z {pI 'X,p/Z}. 

Set 

C'x = C'x. z {p/Z}. 
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Hence T has a proper subtree with the root labelled with C x {r.p/X}F. On the other 
hand, by LemmaEIIJ it follows from C x {p/X} <£ F that C' xz {p/X,p/Z} <£ F. Thus 
C x {t. P /X} ee C' x Z {r.p/X,p/Z} e fl, as desired. 

Case 6.3.2 a G Act. 

Then it is not difficult to know that both Cx and Cx{p/X} are stable. Moreover, since 
C x {t. P /X} T.p = RS p and C x {p/X} £ F, by LemmaE2 we get C x {p/X} -A. 
Further, by Theorem 14. 2 [ it follows from Cx{p/X} £ F that Cx{p/X} q for some 

q. For such a-labelled transition, by Lemma [5J3 there exist C' x , C' x ~ and C" x ~ with 

X Z that realize (GP-o-1) - (CP-a-4). 

In order to complete the proof, we intend to prove that Z = 0. On the contrary, 
suppose Z 7^ 0. Then, by (CP-a-2) and (CP-a-3-i), there exists an active occurrence of 
the variable X in C' x . So, by Lemma [5.41 C' x {r.p/ X} —I. Then, by Lemma [5.121 it 
follows from C x {r.p/X} ee> C' x {t. P /X} (i.e., (GP-o-1)) that C x {r.p/X} which 
contradicts Cx{i~.p/X} — >. 

Thus Z = 0, and hence g ee C" by (CP-a-3-ii). Since CxW.p/X} is stable, 

by (CP-a-3-iii), we get C x {r.p/X} C" ~{r.p/X}. Thus, T contains a proper sub- 
tree with the root labelled with C" x ~{r.p/X}F, moreover, C" ~{r.p/X} E il due to 
C' x ~{p/X} = q^F. 

r.„ qp a A {rF:B x {r.p/X}AD x {r.p/X}^>\r} 
^ 0,4 B x {r.p/X}AD x {T,p/X}F 

Analogous to the second alternative in Case 5, omitted. □ 

In order to show the converse of the above result, the preliminary result below is given. 
Here, for any finite set S of processes, by virtue of the commutative and associative laws 
of external choice QZhang et al. 20iTj ), we may introduce the notation of a generalized 
external choice (denoted by D^p) by the standard method. 

Lemma 6.4. Let t\,t2 be two terms and {X} UZa tuple of variables such that none of 
recursive variable occurring in £,(with i = 1,2) is in {X} U Z. Suppose that Z is active 
in t\ , t2 for each Z S Z and 



T 



□jxa z .O HZ^ 

zez 



ax-0 otherwise 

where ax and a~z are distinct fresh visible actions and a £ Act. Then 

(1) if h{T/X, a^O/ Z} ee t 2 {T/X,a^X)/Z} then t x {p/X,q/Z} = t 2 {p/X,q/Z} for any 
p and q; 

(2) if ^{T/X^O/Z} =>! t 2 {T/X,al70/Z} then t^p/X^/Z} =^ t 2 {p/X,q/Z} for 
any p and q\ 



Proof. (1) It proceeds by induction on t\. Wc distinguish three cases as follows. 
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Case 1 ti is closed or t\ is of the format X or /3.s or s\ V s 2 or (Y\E). 

Since Z is active in t\ for each Z £ Z, we get Z = 0. Then it follows by Lemma \5. 191 

Case 2 t x = si S2jvith e {\\a, A}._ 

Then t 1 {T/X s a z .Q/Z} = Si{T/X, a z .0/Z} s 2 {T/X, a z .0/Z} = ^{T/XjOzJQjZ}. 
Since neither a^-O nor T contain 0, there exist s[,s' 2 such that s\{T/X, a z .0/Z} = 
s'^T/X^O/Z}, s 2 {T/X,a^0/Z) = s' 2 {T / X , a^O / Z} and t 2 = s[ s' 2 . Hence it im- 
mediately follows that ti{p/X, q/Z} = t 2 {p/X, q/Z} for any p and q by IH. 

Case 3 ti = siOs 2 . 

Then tx{T/X,a^JQ/Z} = Sl {T/X,a^l)/Z}Ds 2 {T/X,a^0/Z} = t 2 {T/X, aT^Q/Z}. 
Hence the most top operator of t 2 {T/X,a z .0/Z} is an external choice □. Clearly, such 
operator comes from either T or t 2 . For the former, we get t 2 = X and hence Z = 0. 
Thus t 2 {T/X, a z .Q/Z}(= ax-0) does not contain the operator □ at all, a contradiction. 
So this case is impossible. Hence t 2 = s^Ds^ for some s[ and s' 2 , and the rest of the proof 
runs as Case 2. 

(2) If FV(ti)C\Z = 0, it follows by Lemma Hmfl Next we consider another case FV(ti)n 
Z ^ 0. It proceeds by induction on t\. Since Z is active in t\ for each Z £ Z, we get 
either t% = Z or t\ = s\ s 2 for some Si and s 2 , where Z G Z and G {A, ||^, □}. 
We give the proof only for the case t\ = si\3s 2 , the proofs for the remaining cases are 
straightforward and omitted. 
It follows from t\ = sids 2 that 

h{T/X,az~:0/Z} = Sl {T/X,^/Z}Us 2 {T/X^Q/Z} =^ x t 2 {T/X,azl)/Z}. 

So the most top operator of t 2 {T/X, a z .0/Z} is an external choice □ which comes from 
either T or t 2 . Similar to Case 3 in the proof for item (1), we can make the conclu- 
sion that there exist s[,s 2 such that t 2 = s^Ds^. Moreover, it is easily seen that either 
Sl {T/X,a^0/Z} or s 2 {T/X, a^O/Z} triggers the unfolding from tx{T / X ,a^S) /Z} to 
hiT/X^^O/Z). W.l.o.g, we considerjhe hrst alternative.JThen s x {T/X, a z .0/Z} =h 
s' 1 {T/X,a z .0/Z} and s 2 {T/X, a z .0/Z} = s' 2 {T/X, a z .0/Z}. Rence, by IH andjtem 
(1), for any p and q, we have s\{p/X, q/Z} s'^p/X, q/Z} and s 2 {p/X, q/Z} = 
s' 2 {p/X,q/Z}. Therefore, h{p/X, q/Z} = Sl {p/X,q/Z}Ds 2 {p/X,q/Z} t 2 {p/X,q/Z} 

□ 

The next lemma establishes the converse of Lemma 16.31 

Lemma 6.5. For any Cx and stable process p, C x\j .p / X} ^ F implies Cx{p/X} ^ F. 

Proof. Let p be any stable process. Set 

n = {B x {p/X} : B x {r.p/X} (/ F and B x is a context}. 

Assume t € Q. Then t = C x {p/X} for some C x such that C x {r.p/X} £ F. Let T 
be any proof tree of Strip(VchL R , Mcll r ) I - Cx{p/X}F. Similar to Lemma EP1 it is 
enough to prove that T has a proper subtree with the root labelled with sF for some 
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s € f2, which is a routine case analysis based on the last rule applied in T . Here we treat 
only three primary cases. 

Case 1 {rF % x X? x \t V} with C x = (Y\E). 

Since Cx{r.p/X} F, we get Cx{r.p/X} =^>f \q for some q. By Lemma [5.1 7\ for 
this transition, there exists a stable context C ~ satisfying (MS-r-1) - (MS-r-7). In 
particular, since p and q are stable, by (MS-r-2,7), we have 

q = C' x ~{T.p/X,p/Z}^F. 

Moreover, since each Z(G Z) is 1-active in C ~ (i.e., (MS-r-1)) and r.p — > p, by 

Lemma El we get C' x ~{t. P /X,t. P /Z} =±> C' x ~{t. P / X,p/Z} = q <£ F, which, by 
Lemma 14.21 implies 

C' x ~{T.p/X,T.p/Z}<£F. 

Let ax be any fresh visible action. By (MS-r-3-i), it follows from ax-0 ==> \ax-0 that 
there exists s such that 

Cx{a X -0/X} =l» s ^ C' x ~{a x .O/X,a x .O/Z}. @3J2) 

Since ax-0 and C' ~ are stable, so is C' ~{ax-0/X,ax-0/Z} by Lemma [BTBI Then, by 
Lemma [5. 121 s is stable. Thus, for the transition in (|6.5I 2). by Lemma [5 .171 there exists 
a stable context C* x such that 

s = C x {a x .O/X} and C x {r/X} =^> C* x {r/X} for any r. (15313) 

Then, by LemmaEH it follows from s = C x {a x .O/X} C' x ~{a x .O/X, a x .O/Z} that 

C* x {T.p/X} ^ C' x ~{r.p/X,T.p/Z}. 

Hence C x {r.p/X} <£ F by ([631 1) and Lemma OS which implies C x {p/X} e £1. On 
the other hand, since C x and p are stable, so is C x {p/X} by Lemma [531 Moreover, by 
(j6.51 3). we get C x {p/X} \C x {p/X}. Therefore, T has a proper subtree with the 
root labelled with C* x {p/X}F . 

Case 2 B ^ WAf 'gg^ AMA with Cx = B x A D x . 

Clearly, in such situation, both Bx and D x are stable. Since C x {r.p/X} ^ i 7 ", we 
have Cx{i~.p/ X} =>f \q for some q. So, there exist s and t such that q = s At and 

Bx {r.p/X} ===^f |s and D x {r.p/X} ==>f |t. 

Then, for these two transitions, by Lemma 15.171 there exist B' ~ and D' ~ satisfying 
(MS-r-1) - (MS-r-7) respectively. In particular, since p, Bx and Dx are stable, by (MS- 
r-2,4,7), we have 

(1) s = B' x ~{ T .p/X,p/Y} and B x {p/X} ^ B' x ~{p/X,p/Y}; 

(2) t = D' x ~{ T .p/X,p/Z} and D x {p/X} ^ ^-{p/X^p/Z}. 
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Hence, by Lemma T5.12[ it follows from Bx{p/X} — and Dx{p/X} -/^ that 
B' x ~{p/X,p/Y} -±> and D' x ~{p/X,p/Z} A • 

Further, since B' ~{p/X,p/Y} and B' ~{T.p/X,p/Y} are stable, by Lemma IQl it 

follows from r.p = flS p and s ee 5^ ~{r.p/X,p/Y } £ F that B' x ~{r.p/X,p/Y} -A. 

Similarly, we also have £)' ~{r.p/X,p/ Z} Hence q = s A t e F by the rule i?pio, a 
contradiction. Thus this case is impossible. 

Case 3 Cx{ p /x}f Wlth C x = B x A D x . 

Since Cxjr.p/X} ^ F, we have 

Cx{r.p/X} =^ F \q for some q. (15314) 

Next we distinguish two cases based on a. 

Case 3.1 a = r. 

By (|6.5I 4) and Lemma [5.201 there exist t and stable context C* x such that 
C x {r.p/X} =±> C* x {r.p/X} =±> \t ee> q £ F 

and 

C X { P /X} C* x {p/X}. 

Moreover, since p -f-^r and t € I(C x {p/X}), by Lemma [5T6l there exists a context 
such that 

C X { P /X} C' X {P/X} C* x {p/X} 

and 

C x {r.p/X} -A C^{r.p/X} =±> C* x {r.p/X} \t. 

Further, by Lemma[OSl h follows from q £ F and t ^ q that t £ F. Then, by Lemma [4~2l 
and the transition above, we have C x {r.p/ X} £ F. Hence C' x {p/X} € f2 and one of 
nodes directly above the root of T is labelled with C' x {p/X}F, as desired. 

Case 3.2 a e Act. 

In this case, C x is stable by Lemma 15.71 By (j6.5l 4'l and Lemma I5.17[ there exists 
a stable context C ~ with X £ Y that satisfies (MS-r-1) - (MS-r-7). Then q = 

C ' ~{r.p/X,p/Y} due top /4 and (MS-r-2). Moreover, since C x is stable, by (MS-r-4), 
we have 

C x {r/X} eeV C^ ? {r/X,r/y} for any r. @3l5) 
Then, by C x {p/X} and Lemma EH we get 

C^ ? {p/X,p/Y} -A . (5216) 

Further, by Lemma [6T2"1 we also have C ~{r.p/X,p/Y} because of r.p =rs P and 
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q = C ~{t. P /X >P /Y} £ F. Thus, by TheoremEOJ we obtain 

C' x ? {t. P /X, P /Y} -A f t for some t. 
For such a-labelled transition, by Lemma [531 there exist C" ~, C" ~ ~ and C"' ~ ~ with 

X,y,Z X.Y,Z 

({X} U Y) n Z = that realize (CP-a-1) - (CP-a-4). In particular, due to r.p and 
(CP-a-3-ii), there exist p' z with Z G Z such that 

p -A p' z and i = C^ 9 ^{T.p/X,p/Y,J z /Z} £ F JS217) 



Moreover, by (CP-a-3-iii), for any r, s and with Z 6 Z such that s s^, we have 
? {r/X, s/F} C' xf Z {r/X, s/Y^/Z} whenever C' x 9 {r/X, s/F} is stable. 



(1631 , 

For each ZeZU {-X - }, we fix a fresh and distinct visible action az and set 



rp _A 



D a.az-0, iiZj- 



otherwise. 



Since T and C'~ are stable, so is C'~{T/X,T/Y} by Lemma ESI Then, by l|?D)l8). 
we have 

So, by Lemma [5. 121 it follows from (16.51 5) that there exists i' such that 

C X {T/X} and t' ^ C£ 9fS {T/X, T/Y, az^O/Z}. fl63j9) 

Then, by Lemma 15.91 it is not difficult to see that there exists a context B x g satisfies 
the conditions below: 

(a) t' = B x z {T/X,az^0/Z}- 1 

(b) none of az with Z G Z occurs in B x z \ 

(c) for any s and s' z with Z G Z such that s s' z , 

Cx{s/X} B xz {s/X,s T z /Z} whenever C x {s/X} is stable. 
Now we obtain the diagram below 

by (1631 5 s ) 

Cxfr/I} ^ C' x ~{p/X,p/Y} 

I a by (c) | a by JB3J6) and ([5318) 

by (|6.5I 9). (a) and Lemma IQ1 
B xz {p/xy z /Z} ^ C" 9iS {p/X,p/YMZ} 

By Lemma HOI we also have 

B xz {T.p/xJ z /Z} ^ C^'~ ~{r.p/X,r.p/y,^/Z}. (EUlO) 
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For each Y e Y, since Y is 1-active in C' x ~, by LemmaE2Il)(2) and C' X ~^C" X ~ (i.e., 
(CP-a-1)), so is it in C" x ~. Moreover, by (CP-a-4-i,ii), for each Y £ Y R FV{C' X ~ -), Y 
is 1-active in C"' ~ ~. Then, by Lemma WM, we have 

C' x \y z{T.p/X,T.p/Y,^ z /Z} C'l~ ~{r. P /X, P /Y, P r z /Z} 

which, together with (|6lH7). implies C"'~ ~{r.p/ X,r.p/Y ,p' z /Z] i F by Lemma IO 
Hence, by Lemma EHH it follows from (|53ll0) that B x ^ {r.p/X,^/Z} £ F. Thus, 
B^^pAiPz/^} £ ^> moreover, T has a proper subtree with the root labelled with 
B xz {p/X,p z /Z}F due to (c) and $M>\7). □ 

Hitherto we have completed the first step mentioned at the beginning of this section. 
Now we return to carry the second step. Before proving Lemma |6.7[ a result concerning 
proof tree is given first. 

Lemma 6.6. Let C x s be any context such that for each Z G Z, Z is active and occurs 
at most once. If p, q, t, J and r are any processes such that 

(a) p ^rs q, 

(b) ptxiq, 

(c) r=**% 

(d) s C i, and 

(e) C^{p/X,a/Z}iF, 

then, for any proof tree T for Strip(VchL R , MqlLr) ^ C'x zi^/^' ^/Z}F, there exist 
C~ ~ ~, and g Y with Y <G Y such that 

(1) T has a subtree with the root labelled with C*~ ~ ~{q/X,t/Z, q'^/Y}F : 

( 2 ) C x ~ ~{p/X,s/Z,pJ/Y}£F, and 

(3) pj C 

Proof. It proceeds by induction on the depth of T. We distinguish different cases de- 
pending on the form of C x z . 

Case 1 C x z ^ s closed or C x z = Xi or C x z = Zj for some i < \X\ and j < \Z\. 

It is straightforward to show that this lemma holds trivially for such case. As a sample, 
we consider the case C x g = Zj. Since C x Z {p/X, ts/Z} = Sj ^ F and s C t, we have 

tj £ F. Hence rj \tj by Lemma l4~2l So C x Z {q/X,r/Z} = r 3 £ F. That is, there is 

no proof tree of Strip(VcLL R , Mcll b ) l~ Z {q/X ,r/ Z}F. Thus the conclusion holds 
trivially. 

Case 2 C x z is of the format a.B x z or B x z V ^ or (Y\E). 

For these three formats, since each Z(<E Z) is active in C x z , it is obvious that 
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Z = 0. Thus Cx t g{q/X,r/Z} = C^^{q/X,t/Z}. So, T has the root labelled with 
g{q/X,t/Z}F. Therefore, the conclusion holds by setting C*~ ~ ~ = % with 
Y = 0. 

Case 3 Cj^g = B% % Djf g with G {□, 
W.l.o.g, assume the last rule applied in T is 

iWg/X,f/Z}F 



B^{q/X, r/Z} D^q/X, r/Z}F 

Then T has a proper subtree T' with the root labelled with B^ ^{q/ X ,r/ Z}F. Since 

Cs ^{p/X^/Z} ^ F, we get -Bj^ g{p/X,s/Z} ^ F. Then the conclusion immediately 
follows by applying IH on 7"'. 

Case 4 C-^ ^ = B^ j. A 

The argument splits into four cases based on the last rule applied in T. 

Case 4 1 

B^ s {q/X,?/Z}AD X S {q/X.r/Z}F- 

Similar to Case 3, omitted. 

c . „ B ?J {P,r/Z}Ar', Cgj {q/X,r/Z}/^ 

13 ' ~ %j{?7X,?/Z}ADj S {q/X,7/Z}F 

For any Z(g Z) occurring in Cy since Z is active and ^{q/X ,r/ Z} by 
Lemma l5~4"l we have rz and hence rz = iz because of (c). So, Cj^ ^{q/X, r/Z} = 
z{q/X,t/Z}. Hence T has the root labelled with g{q/X,t/Z}F. Clearly, the 

conclusion holds by setting C~ ~ - = ? with Y = 0. 

° x,z,Y x.z 

', {rF : % 2 {?/X,r/Z}Ar} 



Case 4.3 

If a G Act, the argument is similar to one of Case 4.2 and omitted. In the following, we 
handle the case a = r. If rz -/—> for any Z(G Z) occurring in then the conclusion 

holds trivially by putting C*~ ~~ = g with y = 0. Next we consider another case 

where rz g —> for some Zo(G Z) occurring in Then rz g — — > r' ==> |tz f° r some 

r' by (c), moreover, Zq is 1-active in ^. Thus, by Lemma T5.41 we get 

C^{q/X,r/Z} -A C^{q/X,r [r'/r Zo ]/Z}. 

So, T has a proper subtree T' with the root labelled with C% ^{q/X ,r[r' /rz a ]/ Z}F. 
Since r[r'/rz ] ==> \t and ^{p/X, s/Z} ^ F, by IH, T' has a subtree with the 
root labelled with C*~ ~~{q/Xj/Z,q£/Y}F for some C*~ ~~, pi and qj- such that 

C*~~~{p/X,s/Z,pJ/Y}£F and pj r qj. 
x,z,y ^ RS 
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{rF:C^ S {q/X,?/Z}^\r} 



C XJ ,{q/X,r/Z}F 

It follows from C% ^{p/X,s/Z} £ F that 

^{p/X ,s/ Z} =^-p |p' for somep'. 
Then, by Lemma 15.171 for such transition, there exist a stable context C"~ ~ ~, iy and p Y 

with Y € Y that realize (MS-r-1) - (MS-r-7). In particular, since each s(G 5) is stable, 
by (MS-r-2,7), we have i Y < \X\ with Y € F and 

Pir =^ by ^ each FeF and p' = C'^~ Y {p/X,s/Z,p^/Y} £ F. 

Then, by Lemma 1531 it follows from (MS-r-1) that, for each Y G Y, p Y £ F and hence 
Pi Y ==>f \p'y by Lemma 14.21 Further, since p M q and p ^rs Q: there exist q Y with 
Y G Y such that 

T , I /// J III ,— 

On the other hand, since Z is active and occurs at most once in C% % for each Z G Z, 
by Lemma 15.41 it follows from r =^=> i that 

C^ 2 {q/X, r/Z} C^ s {q/X, t/Z}. Ell) 

Moreover, by (MS-r-3-ii), it follows from ==>f Wy with Y G Y that 

Czj{q/X,t/Z} C'~ ~ Y {q/X,t/Z,q^/Y}. (63J2) 

Since p M g, s C i and p Y ' C by p' = C'~ ~ ~{p/X,s/Z,p Y /Y} and 

~ RS ~ RS ~ ~ ~ 

Lemma [531 we can make the conclusion that C"~ ~ ~{q/X,t/Z,q Y IY\ is stable. Hence 

T has a proper subtree with the root labelled with C'~ ~ ~{q/X,t/Z, q Y '/Y}F by Ell) 

and ([6312), moreover, we also have p' = C'~ ~ r Ap/X, s/Z,p&/Y\ £ F and j& C 

Consequently, C ~ ^ y ,Py an d 9y are what we seek. □ 

Lemma 6.7. For any C% and processes r and s, if r IX sand r C_rs s, then C^{r/X} ^ 
F implies C^{s/X} ^ F. 

Proo/. Set 

fi = : p tx g, p q, B^{p/X} £ F and B x is a context}. 

Let C'x{q/X} G n and T be any proof tree of Strip(P C LL n , M C ll b ) I" C^{g/X}F. 
Similar to Lemma 16.31 it suffices to show that T has a proper subtree with the root 
labelled with sF for some s G f2. We distinguish six cases based on the form of C^. 

Case 1 Cjr is closed or = X,-. 

In such situation, Cj^ {g/X} ^ F because of Cj^{p/X} £ F and p C fls g. Thus there 
is no proof tree of Cj^{q/X}F. Hence the conclusion holds trivially. 
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Case 2 = a.B^. 

Then the last rule applied in T is Bx{q L X ^ F . Moreover B^{p/X\ 4 F due to 

a.B^{q/ X}F a 1 *' J r 

Cjj {p/X} £ F. Hence G Q, as desired. 

Case 3 = V% 

Obviously, the last rule applied in T is B * { ?l X ^^)l{* } / ■ Due to CfVp/X} 4 F, 

Bj^{q/X}\/D^{q/X}F A 

we have either B^{p/X} 4_ F or ^ F, which implies B^{q/X} e or 

Dj({q/X} G £1. Thus T contains a proper subtree with the root labelled with sF for 
some seSl. 



Case ACx=Bx&Dx with G {□, \\ A }. 

B ? {q/X}F 
J3^{q/X}QD^{q/X}F 

we get B^lp/X} 4_ F, which implies B^{q/X} G fl, as desired 



W.l.o.g, assume the last rule applied in T is R __ J ~ / ?J n _ f - ; y lc , ' Since Cjj{p/X} ^ F, 



Case 5 = (Y\E). 

Clearly, the last rule applied in T is 

either (trmwxjF wMi y =ty £ e ot tusnmm^l. 

{Y\E){q/X}F (Y\E){q/X}F 

For the first alternative, we have (ty\E){p/ X} 4_ F because of C^{p/X} 4_ F, and 
hence (t Y \E){q/X} G ft. 

For the second alternative, due to C^{p/X} 4_ F, we get 

C^{p/X} =^>f \s for some s. 

For such transition, by Lemma T5. 171 there exist C'~ ~, iz < \X\ and p' z with Z G Z that 
realize (MS-r-1) - (MS-r-7). Amongst them, by (MS-r-2,7), we have 

Piz =^ \Pz with Z G Z and s = C^ z {p/X,7z/Z} 4_ F. flOl) 

Thus, for each Z G Z, by (MS-r-1) and Lemma T5. 51 it follows that p' z 4_ F, and hence 
Pi z ==^f \p'z by Lemma 14.21 Further, since p M g, it follows from pC BS g that for each 
ZgZ, 

?i z =^>f |fe andp' z C for some q' z . (EIZJ2) 

Then C^{q/X) C'~ ~{q/X,q^/Z} by (MS-r-3-ii). On the other hand, since p M 

g and p'^ C q^, by Lemma 15.61 it follows from s = C'~ ~{p/X,p' 7 /Z} -f^r that 
_^_gs_ X ' Z 

C'~ ~{q/X,q' z /Z} is stable. Therefore 



C^{q/X} ^\C'^ 2 {q/X,q' z /Z}. 
Hence 7~ has a proper subtree with the root labelled with C'~ ~{q/X, q' z /Z}F, moreover 
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C'~ ~{q/X,q' z /Z} G ft due to (^71 ll and (16712'). 



Case 6 =B^AD^. 



The argument splits into five subcases depending on the last rule applied in T ■ 
Case 6.1 B - { ^ }F 



By{g7X}Al3 ? {57X}F 

Similar to Case 4, omitted. 



p R „ B5 r {g/X}-^-r,D jF {g/X} ^.^{q/X}/: - 

Clearly, £ F and F^{p/X} £ F due to C^ip/X} £ F. Moreover, by 

p ixi g and Lemma 15. 6[ we have C^{p/X} /— > because of C^{q/X} -/—>. Further, 
by Lemma 16 . 21 we also have B^{p/X} — and D^{p/X} -/—>. So, C^{p/X} = 
B^{p/X} A Dj({p/X} £ F by the rule Rpio, which contradicts {g/JT} g ft. Hence 
such case is impossible. 

Case 6.3 c xWx}^v ^tF-.c^wx}^} ^ 

c x {l/ x } F 

It follows from C^{p/X} £ F that 

C^{p>/X} \s for some s. (|6.7t 3) 

Since p g and C^{g/X} -A, by LemmaEH we get C^{p/X} Then, by (|S?fl3). 
we have 

C^{p/X} — — > f i =>f |s for some i. 

For the r-labelled transition leading to t in the above, either the clause (1) or (2) in 
Lemma 15.61 holds. 

For the former, there exists C'~ such that t = C'~{p/X\ and C^{q/X} C'~{q/X}. 

X X X 

Hence C'~{q/ X}F is one of premises of the last inferring step in T. Moreover, it is evident 

that c~{q/x} e ft. 

For the latter, there exist C'~, C'~ with Z 4 X and i < \X\ that realize (P-r-1) - 

X X ,z 

(P-r-4). In particular, by (P-t-2), we have 

t = C"~ Z {p/X,p'/Z} for some p' with p io p'. 

Further, since t =^=>i? \s and Z is 1-active in C'~ , by Lemma fa. 211 and 14.21 there exists 
p" such that p' =^> \p" and 

* = C'L z {p/X,p'/Z} ==^f ==^f \s. 

Moreover, p" ^ F by Lemma 1531 Hence p io -^f p' ==>f \p" by Lemma |4~21 Since 
p ixi g, it follows from p Qrs 9 that 

gj — g' =>f |<?" andp" C g" for some q' and g". (16.71 4) 

~RS 

Then Cjf {g/X} C"~ Z {q/X, q'/Z} by (P-r-4). Therefore, T contains a proper subtree 
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T 1 with the root labelled with C'~ Z {q/X,q' /Z}F. In order to complete the proof, it is 
enough to show that T' contains a node labelled with s'F for some s' 6 ft. Since Z is 1- 
active, p Q R s q,P>$q, q' ==> \q" , p" C q" and C"~ {p/X,p" /Z} £ F, by Lemma I6T61 

there exist C*~ ~ and q Y ' ,p Y with Y eY such that 

(a.l) T has a subtree with the root labelled with C*~ ZY {q/X, q"/Z, q^/Y}F, 
( a ' 2 ) C*~ zY {p/X,p"/Z,p^/Y} £ F, and 
(a.3) 7 Y ' C 

Clearly, C£ ^ ? {g/X, g^/Y"} G ft due to (a.2), (a.3) and (|6?fl 4). as desired. 

Case 6.4 ^'^'t'f^f (a e Act). 

Since p IX q, by Lemma [57^1 it follows from C^{q/X} that C^{p/X} is stable. 

Further, since pQrs q and Cj-;{j?/X} ^ F, we get Cj^{p/X} by Lemma ROl So, by 
Theorem 1431 and C^{p/X} ^ F, we have 

Cjf {p/X} —>f t =>f |s for some t and s. (|6.71 5) 
For the a-labelled transition involving in (16.71 5). by Lemma [5.91 there exist C'~, C'~ ~ 

X X , i 

and C'~ ~ that satisfy (CP-a-1) - (CP-a-4). In particular, by (CP-a-3-ii), there exist 
iy < \X\ and p' Y with Y 6 Y such that 

Piy Py and t = C'L ~{p/X,7 Y /Y}- 
Moreover, by (CP-a-1) and (CP-a-3-i), we have 

C^{p/X} ^ C'~{p/X] = C'~ Y {p/X,p~/Y}. 

Hence C'~ ~{p/X,p~Z /Y} 4 F by C^{p/X\ <£ F and Lemma [5TT51 Further, for each 
Y e Y, since Y is 1-active in C'~ ~ (i.e., (CP-a-2)), by Lemma IS31 pj y ^ F. 

On the other hand, for the transition t = C'~ ~{p/X ,p Y /Y} ==>f I s in (16.71 5). by 

X , i * 

Lemma [5.211 it follows from each Y(€ Y) is 1-active in C'~ ~ (i.e., (CP-a-2)) that there 
exist p Y with Y GY such that p' Y ==> \p'y and 

* ee C\ Y {p/Xj y /Y} C'L Y {p/xJ Y /Y} \ s . 

Since s £ F, we obtain C"~ ~{p/X,p Y /Y} £ F by Lemma l4~2l which implies that p Y F 
with Y GY due to Lemma [5. 51 Thus 

Pi Y —^f p'y ==^f \p'y f° r eacn Y eY. 

Since p x it follows from p Qrs Q that, for each Y £ Y, there exist q' Y and q y such 
that 

qi Y <{y =>F Wy andpy C g y . dH7l6) 
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Then C R {q/X} C'^ y {q/X, q' Y /Y} by (CP-a-3-iii). Hence T has a proper subtree V 

with the root labelled with C'~ ~{q/X, q' Y /Y}F. In order to complete the proof, it suffices 

to show that T' contains a node labelled with s'F for some s' £ f2. Since each Y(£ Y) is 
1-active in C"~ p C RS q, p ^q,q^ =L> \qj, pj c and C£ ~ {p/A,^/?} £ F, 

by Lemma [6~6l there exist C*~ ~ ~ and q" z \p"z with Z £ Z such that 

(b.l) T has a subtree with the root labelled with C*~ ~ ~{q/ X ,q^/Y ,q% /Z}F, 

( b - 2 ) C x !Y , z {P/X,pJ/Y,p^'/Z} i F, and 

(b.3)p|'E gf'. 



Obviously, C| ? ~{q/X,q Y /Y,q%/Z} £ CI due to (b.2), (b.3) and (^71 6), as desired. 
Case 6 5 

B X {q/X}AD x {q/X}F^ 

Similar to the second alternative in Case 5, omitted. □ 

In the remainder of this section, we shall prove that 'Qrs indeed is precongruent. 
Let us first recall a distinct but equivalent formulation of Qrs due to Van Glabbeek 
( Liittgen and Vogler 2010| ). 

Definition 6.2. A relation TZ C T(ScLL n ) x r(£cLL H ) is said to be an alternative ready 

simulation relation, if for any (p, q) £ TZ and a £ Act 

(RSi) p =^f \p' implies 3q' .q =>f \q' and (p',q') £ TZ; 

(RSiii) p =^f \p' and p, q stable implies Bq'.q ==>f \q' and (p', q') £ TZ: 

(RSiv) p F and p, q stable implies I{p) = T{q). 

We write p Qalt q if there exists an alternative ready simulation relation TZ with 
(p, q) £ TZ. 



The next proposition reveals that this definition agrees with the one given in Def. [ 
Proposition 6.1. Qrs—Qalt- 

Proof. See Prop. 13 in ( |Liittgen and Vogler 20101 ). □ 



One advantage of Def. l6.2l lies in that, given p and q, we can prove p Qrs q by means of 
giving an alternative ready simulation relation relating them. It is well known that up-to 
technique is a tractable way for such coinduction proof. Here we introduce the notion of 
an alternative ready relation up to C as follows. 

~iiS 

Definition 6.3 (ALT up to □ ). A relation 1Z C T(£ CLL J x T(S C ll„) is said to 

~RS 

be an alternative ready simulation relation up to □ , if for any (p, q) £ TZ and a £ Act 

~RS 

(ALT-upto-1) p =>f \p' implies 3q' .q =^>f \q' and p 1 C TZ C q 1 ] 

~RS - RS 

(ALT-upto-2) p =^f \p> and p, q stable implies 3q' .q =^>f \q' and p' C TZ C q'; 
(ALT-upto-3) p F and p, q stable implies Z(p) = 1(g)- 
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As usual, given a relation 7Z satisfying the conditions (ALT-upto-1,2,3), in general, 1Z 
in itself is not an alternative ready simulation relation. But simple result below ensures 
that up-to technique based on the above notion is sound. 

Lemma 6.8. If a relation 1Z is an alternative ready simulation relation up to C then 

~RS 

Proof. By Prop. 16.11 it is enough to prove that the relation ^rs °TZ° ^rs is an 
alternative ready simulation. We leave it to the reader. □ 

Now we are ready to prove the main result of this section: is precongruent w.r.t 
all operations in CLL^. We shall divide the proof into the next two lemmas. 

Lemma 6.9. Cx{p/X} =rs Cx{t.p/X} for any context Cx and stable process p. 

Proof. Let p be any stable process. First, we shall show that Cx{p/X} Qrs Cx{t.p/X}. 
Set 

K = {{B x {p/X} 7 B x {T.p/X}) : B x is a context}. 

By Prop. 16.11 and Lemma I6.8) it is enough to prove that 1Z is an alternative ready 
simulation relation up to □ . Let (Cx{p/X}, Cx{t.p/X}) G 1Z. 

~RS 

(ALT-upto-1) Assume that Cx{p/X} =>f \p' ■ For this transition, since p is stable, 
by Lemma T5. 171 there exists a stable context C' x such that 

p' ee C'x{p/X} and C x {r.p/X} ^ C' x {t. P /X}. 

Moreover, by Lemma T5. 181 it follows from r.p \p that 

C' x {T.p/X} ==> \r for some r. (|6Jl 2) 

For this transition, by Lemma 15.171 there exists a context C" x ~ with X <f_ Y such that 
r ee C'^ ~{T.p/X,p/Y} and 

p' = C' x {p/X}^Cy{p/X 7 p/Y}. (j6H3) 

Since p' ^ F, by Lemma [5.151 we get G" x ~{p/X, p/Y} ^ F. Further, by Lemma [6.31 
r ee C" x ~{t. P /X, P /Y} i F. So, by (gUl), (EU2) and Lemma[OJ we obtain 

Cx{r.p/X} ^ F \C' x ~{T.p/X,p/Y}. 
Moreover, by Lemma T5. 161 it follows from (|6.9I 3) that 

p' c C' x ~{p/X,p/Y}lZC' x ~{T.p/X,p/Y}. 

(ALT-upto-2) Assume that Cx{p/X} and Cx{r.p/X} are stable and Cx{p/X} =^>_f 
\p'. Hence Cx{p/X} -^f t ==>f \p' for some r. Moreover, by Lemma l6~3l and Cx{p/X} ^ 
F, we have 

Cx{t. P /X} i F. d6H4) 
On the other hand, for the a-labelled transition Cx{p/X} -—*f t, by Lemma IS~9l there 
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exist C' X ,C' X ~ and C" x ~ that realize (CP-o-1) - (CP-a-4). By (CP-a-1) and (CP-a-3-i), 
we have 

C x {T.p/X} ^ C' x {r.p/X} = C' x ? {T.p/X 7 T.p/Y}. 

If Y ± then, by (GP-o-2) and Lemma [El we have C ' ~{r.p/X,T.p/Y} and 

hence Cx{t.p/X} — > by Lemma l5.12[ which contradicts that Cx{i~.p/X} is stable. 
Thus Y = 0. So, r = C" x ? {p/X} by (CP-a-3-ii) and 

C x {t. P /X} -±> C x ~{t. P /X} by (CP-a-3-iii) and C x {t. P /X} -f^ . flS3l5) 

Moreover, by (ALT-upto-1), it follows from (C" y{p/X}, C" ~{r.p/X}) £ K and r = 
C"~{p/X} ^ F y that C" ~{t. P /X) =^ F W and p' a ft C e?' for some e?'. 

X,Y X,Y ^ RS ^ RS 

Moreover, we also have Cx{r.p/X} W due to (|6.9I 4) and (|6.91 5). as desired. 

(ALT-upto-3) Immediately follows from Lemma [6. 2 1 

Next we intend to prove Cx{i~.p/X} a RS Cx{p/X}. Set 

K = {(Bx{t.p/X},B x {p/X}) : B x is a context}. 

Similarly, it is enough to prove that 1Z is an alternative ready simulation relation up to 
□ . Let (Cx{t.p/X}, Cx{p/ X}) G 1Z. In the following, we will check that the condition 

~RS 

(ALT-upto-1) holds. For (ALT-upto-2) and (ALT-upto-3), the proof are analogous to the 
preceding one and omitted. 

Assume that Cx{t.p/X} =>f \p' ■ For this transition, by Lemma [5.20[ there exist r 
and stable context C* x such that Cx{p/X} C x {p/X} and 

C x {r.p/X} C x {r.p/X} \r p' . (EH6) 

Moreover, since p is stable, so is C x {p/X} by Lemma [5.61 Due to r p' and p' ^ F, 
by LemmaOSl we get r $ F. Hence C x {r.p/X} <£ F by ([6216) and Lemma[0] Then 
C^{p/X} <£ F by Lemma EU Thus 

C x {p/A} =^ |C^{p/X}. 

To complete the proof, it remains to prove that p' a Ha C x {p/X}. For the 

transition C x {r.p/ X} => \r in (|6.9I 6). by Lemma l5.17[ there exists a stable context 
C'*~ such that r = C^-{r.p/X,p/F} ^ p' and ^ C%~{p/X,p/Y}, which, 

by Lemma 15.161 implies 

p'c C'* ? {r.p/X,p/Y}HC'*~{p/X,p/Y}a C* x {p/X}. 

□ 

Lemma 6.10. If p ex q and p a RS q then C x {p/X} a RS C x {q/X} for any C x . 
Proof. Set 

7?. = {{B x {p/X}, B x {q/ X}) : p xi q,p a R g q and B x is a context}. 
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Similarly, it suffices to prove that 1Z is an alternative ready simulation relation up to 
C ■ Suppose (Cy{p/X},C^{q/X}) e 1Z- Then, by Lemma 16721 it is obvious that such 

~RS 

pair satisfies the condition (ALT-upto-3). In the following, we consider two remaining 
conditions in turn. 

(ALT-upto-1) Assume that C^{p/X} ==>f \s. For this transition, by Lemma \5. 171 
there exist C'~ ~, i Y < \X\ and p' Y with Y G Y that satisfy (MS-r-1) - (MS-r-7). In 
particular, by (MS-r-2,7), we have 

PlY ^ \p' Y and a = C' R ? {p/X,7 Y /Y} £ F 

Then, by (MS-r-1) and Lemma T5.51 p' Y F and hence pi Y =^>f \p'y by Lemma H. 21 for 
each Y G Y. Since p XI q, it follows from p C^g q that there exist q' Y with Y G Y such 
that 

q% Y =>f \q'y andpy C gy. (16.101 1) 

So, by (MS-r-3-ii), we get 

C^{g/X}^C^~{§/X,^/y}. 

Moreover, by Lemma I51H it follows from s = C'~ ~{p/X,p' Y /Y} /— px <f andp' y C 
X < Y ~RS 

q Y that 

c^{9/x,4/y} A- 

On the other hand, by Lcmma[6J]and C'~ ~{p/X,p£/Y} £ F, we get C'~ -{q/X^/Y} £ 
F . Hence, by Lemma l4~2l we obtain 

C R {q/X} ^ F \C'x Y {q/X,7 Y /Y}. 

Moreover, (C- - {p/X, pZ/Y }, C'~ ~{q/X, qC/Y}) GC Tl C due to dOil l) and 
A,y x,y ^ fis ^ fls 

the reflexivity of C 

~RS 

(ALT-upto-2) Let C^{p/X} and C^{q/X} be stable and C^{p/A} ^ F \s. Then 
C^{p/A} -^ F r=^ f \s for some r. (|fTT0l2) 
Moreover, by Lemma IfTTl it follows from pt<q,p C^g q and C^{p/X} ^ F that 

Cx{q/X} $ F. {63013) 
For the transition C^{p/A} r, by Lemma 1531 there exist C'~, C'~ ~ and C"~ ~ that 

" X -X. . Y JK . i 

satisfy (CP-a-1) - (CP-a-4). In particular, by (CP-a-3-ii), there exist i Y < \X\ and p' Y 
with Y e Y such that pi Y p' Y and r = C "~ ~{p/X,p' Y /Y}. Moreover, by (CP-a-1) 
and (CP-a-3-i), we have 

C^p/X} C'~{p/X} = C'~~{p/X,p~/Y}. 
Hence C'~ -{p/X^pi^/Y} £ F by C^{p/X} F and Lemma 15.151 Further, since each 
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Y(<E Y) is 1-activc in C' x ~, by Lemma [5751 we get 

p iY i F with Y e Y. I^TTOU) 

By LemmaE^Il it follows from r = C'L ~{p/X,jL/Y} =^ Is in (1BTTU1 2) that for each 
FeF, there exists p' Y such that p'y =^4> |py and 

c^ ~{p/x,^/y} ^ cy{p/x,pJ/Y} =U \ s . 

Then C~ Y {p/X : p Y /Y} £ F due to s £ F and Lemma E7J and hence p Y £ F with 
y £ V by Lemma 15.51 Therefore, by (I6.10I 4 1 ) and Lemma B~2l we have 

Pi Y -^-f p'y ==>f \p'y f° r eacn y g y 

On the other hand, since p\xiq, it follows from p Qrs <f that for each Y 6 Y, there exist 

q Y and q Y such that <7j y — ->f q'y ==^f <7y and p y C <?y. By (CP-a-3-iii), we get 

~RS 

C^{q/X} -A C£ ~{g/X,£/Y}. 05) 
Further, by Lemma |5. 41 and (CP-a-2), we obtain 

Cy{q/X, ql/Y} Cy{q/X, qJ/Y}. §M6) 

Clearly, (C> x ~{p/X,pJ/Y}, C'L ~{q/X, #/?}) e TZ. So, by C' x ~{p/X,pJ/Y} =^ F 

|s and (ALT-upto-1), there exists t such that C"~ ~{q/X,q Y /Y} => F \t and s C 

_ X > Y ~R S 

ft C i, moreover, we also have C ? {q/A} =^ F |t due to (|ODl 3). (15301 5). ([671(11 6) 
and Lemma 14721 as desired. □ 

We are now in a position to state the main result of this section. 

Theorem 6.1 (Precongruence). If p C fis q then Cx{p/X} ^rs Cx{q/X} for any 
context Cx- 

Proof. By Lemma l6.9l and[ 6.10l it immediately follows from r.p —rs V Qrs q —rs T -<7- 

□ 

As an immediate consequence of this theorem, we also have 
Corollary 6.1. If p C FS <f then C x {p/ X} C^g C x {q/X} for any context C x . 

Proof. Applying Theorem 16.11 finitely many times. □ 

7. Unique solution of equations 

This section focuses on the solutions of equations. Especially, we shall prove that the 
equation X =rs tx has at most one consistent solution modulo —rs provided that X is 
strongly guarded and does not occur in any scope of conjunctions in tx, moreover, the 
process (A|A = tx) indeed is the unique consistent solution whenever such equation has 
a consistent solution. We begin with giving two results on the inconsistency predicate F. 
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Lemma 7.1. For any stable processes p,q ^ F and context Cx such that X does not 
occur in any scope of conjunctions, if Cx{p/X} G F then Cx{q/X} 6 F. 

Proof. Assume that Cx{p/X} e F and T is any proof tree of Strip(PchL R , Mcll r ) H 
CxIp/A'jF. We proceed by induction on the depth of T. The argument is a routine 
case analysis on Cx- Moreover, since X does not occur in any scope of conjunctions, in 
addition to that Cx is closed, the form of Cx is one of the following: X, a.Bx, BxODx 
with e {V, □, \\a} and (Y\E). Here, we give the proof only for the case Cx = (Y\E), 
the other cases are straightforward and omitted. 

For the case Cx = (Y\E), the last rule applied in T is 

. , lt Y \E){p/X}F . , „ „ {rF : (Y\E){p/X} =i» \r} 

either \y\e){p/xIf Wlth r-treE* \ Y \ E \Yp /x \ F li - 

For the first alternative, we have {t Y \E){q/ X} E F by IH, and hence Cx{q/X} = 
{Y\E){q/X}eF. 

For the second alternative, assume (Y\E){q/X} \s. Since q is stable, by Lemma l5.17l 
s = C' x {q/X} for some stable C' x such that X does not occur in any scope of conjunc- 
tions in C'x and (Y\E){p/X} C^{p/X}. Moreover, since p is stable, so is C' x {p/X}. 
Thus there exists a proper subtree of T with the root labelled with C' x {p/X}F. So, by 
IH, s = C' x {q/X} £ F. Hence C x {g/A} 6 F by Theorem[OJ as desired. □ 

This result is of independent interest, but its principal use is that it will serve as an 
important step in demonstrating the next lemma, which reveals that the above result 
still holds if it is deleted from the hypotheses that q and p are stable. 

Lemma 7.2. For any processes p,q ^ F and context Cx such that X does not occur in 
any scope of conjunctions, if Cx{p/X} e F then Cx{q/X} G F. 

Proof. Suppose that Cx{p/X} £ F. We proceed by induction on the depth of the 
proof tree T of Strip(VcLL R , Mcll r ) ^ Cx{p/X}F. Similar to the preceding lemma, 
we handle only the case Cx = (Y\E). In such situation, the last rule applied in T is 

, (t Y \E){p/X}F , {rF : (Y\E){p/X\ =^> \r\ 

either \ } F [ / with Y = t Y e E or i ) , { ^_L. 

{Y\E){p/X}F Y (Y\E){p/X}F 

The argument for the former is same to one in Lemma ITTTl and omitted. In the following, 
we consider the latter and suppose {Y\E){q/X} \s. By Theorem 14. 2 [ it is not difficult 
to see that, to complete the proof, it suffices to prove that s G F. By Lemma l5.20[ there 
exist t and stable context C* x such that 

(Y\E){q/X}^C x {q/X}^\t^s 

and 

(Y\E){r/X} =^ C* x {r/X} for any r. 

In particular, we have (Y\E){a x .0/X} C x {a X -0/X} where ax is a fresh visible 
action. For this transition, applying Lemma 15.61 finitely times (notice that, in this pro- 
cedure, since ax-0 is stable, the clause (2) in Lemma [5.61 is always false), then by the 
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clause (1) in Lemma [5. 61 we get the sequence below 

(Y\E){a x .0/X} ee C° x {a x .Q/X} C x {a x .0/X} -A 

■ ■ ■ C^{ax.0/X} ee C^{ax.0/X}. 

Here n > and for each 1 < i < n, C x satisfies (C-r-1,2,3) in Lemma [5761 Since X does 
not occur in any scope of conjunctions in (Y\E), by (C-r-3-iv), neither does X in C x . 
On the other hand, by Lemma [5.191 we have C x = C* x . Hence X does not occur in any 
scope of conjunctions in C x . 

If p is stable then so is C* x {p/X} by LemmaEH Thus, by (j772l l). C^{p/X}F is one 
of premises in the last inferring step in T. Hence C x {q/X} G F by applying IH. Then 
t G F by Lemma 14.21 Further, by Lemma 15.151 it follows from t e^ s that s G F, as 
desired. 

Next we consider another case where p is not stable. In such situation, due to p ^ F, 
we have 

p ==> \p* for some p* . I|72l2) 
In the following, we distinguish two cases based on whether g is stable. 

Case 1 g is stable. 

Then, for the transition (Y\E){q/X} ==> \s, by Lemma T5. 171 we have s = C' x {q/X} 
for some stable G' x such that X does not occur in any scope of conjunctions and 
C x {p/X} =^> C' x {p/X}. Moreover, by LemmaEHl it follows from ([77512) that 

C' x {p/X} ^> \p' for somep'. 

For this transition, by Lemma f5 .171 there exist a stable context C'£ ~ and stable processes 

p' Y with Y G Y that realize (MS-r-1) - (MS-t-7). In particular, by (MS-r-3-ii), it follows 
from ([77212) that 

C x {p/X}=^C'l Y {p/X,p*/Y}. 

Moreover, by (MS-r-2), p> = C'*~{p/X,p^/Y}. Then, since p> = C'*~{p/X,^/Y} 

and p* are stable, by Lemma[576l so is C* ~{p/X,p*/Y}. Thus, 9 {p/X,p*/Y}F is 
one of premises of the last inferring step in T. Then, by (MS-r-6) and IH, we obtain 

C'*~{q/X,p*/Y}eF 

Further, by (MS-r-6) and Lemma \7. 11 we get 

C' x ~{q/X,q/Y}eF. 

On the other hand, due to the stableness of C' x , by (MS-r-4), we have 

C x {q/X}^C'*~{q/X,q/Y}. 

Hence s = C' x {q/X} G F by Lemma [5.151 as desired. 



Case 2 q is not stable. 
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By Lemma [5.171 for the transition (Y\E){q/X} => \s, there exist a stable context 
C' x ~ and q' z with Z G Z that satisfy (MS-r-1) - (MS-r-7). Amongst them, by (MS-r- 
2,7), 

q \q' z with Z G Z and s = ^{g/X, c^/Z}. (17313) 

If g# € jF for some Z G Z then by Lemma 15.51 we get s £ F (notice that each Z in Z is 
1-active), as desired. In the following, we handle another case where 

q' z £ F for each Z eZ. ([731 4) 

By (MS-r-3-ii), it follows from ([7312) that 

C x {p/X} ^ C' x ~{p/X,p*/Z}. 

Since p -A, g p* ^ with Z G Z and s = C' x ~{q/X, q^/Z} by 

Lemma [5.61 Cv i s stable. Hence T has a proper subtree with the root 

labelled with C' ~{p/X,p* /Z}F. Then C' ~{q/X,p*/Z} G F by (MS-r-6) and IH. 

Further, by Lemma [73 it follows from ([7313) and ([7314) that s = C*^ £ 
F, as desired. □ 

We shall use the notation Dep(T) to denote the depth of a given proof tree T ■ Given 

p, q and a G Act r , for any proof tree T of Strip(VcLL R , Mcz,h R ) l~ P <Z, it is evident 

that T involves only rules in Table [U Moreover, since each rule in Table Q] has only 

finitely many premises, it is not difficult to show that Dep(T) < cj by induction on the 

depth of T. This makes it legitimate to use arithmetical expressions with the form like 

^2 Dep{T) where fi is a finite set and each T G SI is a proof tree for some labelled 
Te n 

transition p — > r. 

Definition 7.1. Given p =>f Q and a finite set J! of proof trees, we say that S7 is a 
proof forest for p => f 9 if there exist pi with < i < n such that 

(1) p = p —~^F Pi -^F ' ' ' -^F Pn = Qi 

(2) for each i < n, f2 contains exactly one proof tree for Strip(VchL R , Mcll r ) I - Pi — ► 
Pi+i, and 

(3) for each T G H, T is a proof tree for Strip(Vci,L R , Mcll r ) \~ Pi —> P;+i f° r some 
i <n. 

The depth of f2 is defined as Dep(fl) = Dep(T). Similarly, we may define the notion 

Ten 

of a proof forest for p ==>f 9- 

It is obvious that p ==>f q (or, p ==>f <?) holds if and only if there exists a proof forest 
for it. The following lemma will prove extremely useful in establishing the main result in 
this section and its proof involves the induction based on the depth of proof forests. 

Lemma 7.3. Let Cx be any context where X is strongly guarded and does not occur 
in any scope of conjunctions. For any processes p,q £ F with p ixi g, if p =rs C'x{p/X} 
and q = RS C x {q/X} then p = RS q. 
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Proof. Suppose p,q ^ F with p X q, p =rs Cx{p/X} and q =rs Cx{q/ X}. It is 
enough to prove that p Qrs ?• Put 

1Z = {{Bx{p/X}, Bx{q/X}) : X does not occur in any scope of conjunctions in Bx}- 

By Prop. [6TT1 and Lemma l6.8l it suffices to prove that 1Z is an alternative ready simulation 
relation up to □ . Let (B x {p/X\, B x {q/X}) e 1Z. 

~RS 

(ALT-upto-1) Assume that Bx {p/X} =^>f \p' and is any proof forest for it. Hence 
Bx{p/X} = po —^f Pi — • • -Pn-i \Pn = p' for some pi with < i < n, and fl 

exactly consists of proof trees 71(0 < i < n) for Strip(VcLL R , Mcll r ) l~ Pi Pi+i- Wc 
intend to prove that there exists q' such that Bx{q/X} =^>f W and p' E ^ C g' 

by induction on Dep(Q). It is a routine case analysis on Bx- We treat only three cases 
as samples. 

Case I B X =X. 

Then B x {p/X} =p^> F \p'. Thus it follows from p = RS C x {p/X} that 
Cx{p/X} ==>f \s andp' C s for some s. 

~RS 

Since X is strongly guarded and does not occur in any scope of conjunctions in Cx, by 
Lemma T5. 171 there exists a stable context C' x such that 

(a.l) s = C' x {p/X}, 

(a. 2) X is strongly guarded and does not occur in any scope of conjunctions in C' Xl and 
(a.3) C x {q/X} C' x {q/X}. 

Since s = C' x {p/X} by (a.2) and Lemma l5~T0l we have C' x {q/X} More- 

over, by Lemma 17721 C x {q/X} £ F follows from C' x {p/X} £ F and p,q <£ F. Hence 
Cx{q/X} =!k>F \C'x{l/X} by (a.3) and Lemma l4~2l Further, it follows from q =j?s 
C x {q/X} that 

q =S>f W and C' x {q/X} (Z </ for some g'. 

Therefore, B x {q/X} = q^> F \q' and p' C s = C' x {p/X}KC' x {q/X} C <?'. 

~ as ~ as 

Case 2B x e (Y\E). 

If is stable then so is (Y\E){q/X} by p M g and Lemma [5761 More- 

over, by Lemma [FTJ] we have ^ F because of (Y\E){p/X} £ F. Hence 

{Y\E){q/X} ^ F \(Y\E){q/X} and ({Y\E){p/X}, (Y\E){q/X}) €C ft C due to 

the reflexivity of C 

Next we handle another case where (Y\E){p/ X} is not stable. Clearly, the last rule 
applied in 7o is 

(tv\E){p/X}^p^. thY = 
(Y\E){p/X}^ Pl 

Thus, 7o contains a proper subtree, say 7q j which is a proof tree of Strip(VcLL R , AfcLL R ) l~ 
(ty|E){p/X} Pl and Dep(To) < Dep(T Q ). Thus O' 4 {7o,7< : 1 < i < n - 1} is a 
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proof forest for {ty\E){p/ X} =^>f \p' , moreover 

Dep{Vt') < Dep(Sl). 

Then, by Lemma 0^5) and IH, we have {t Y \E){q/X} ==> F \q' and p' C 1Z C g' 
for some g'. Moreover, we also have Bx{q/X} = (Y\E){q/ X} =^>f W, as desired. 

Case 3 B x = D x OD' x . 

If Bx {p/X } is stable then we can proceed analogously to Case 2 with (Y \ E) {p/X } 7^— > . 
In the following, we consider the case Bx{p/X} — K 

For the transitions Dx{p/X}DD' x {p/X} = p —>f • • • —^f \p n = p'{n > 1), there 
exist two sequences of processes t (= Dx{p/X}), . . . , t n and sq(= D' x {p/X}), . . . , s n 
such that t n , s n are consistent and stable, p n = t n Ds n , and for each < i < n, pi = UDsi 
and the last rule applied in % is 

, T , T 

either 



tjDsj — > tj +1 Dsj +1 tidsi — > t i+ iDs i+ i 

For the former, s,-+i = Si and 7i contains a proper subtree 7~' which is a proof tree for 
Strip(VcLL R : Mcll r ) l~ — > i-t+i- We use f2i to denote the (finite) set of all these proof 
trees T(- Similarly, for the latter, fj_|_i = ti and 71 contains a proper subtree %" which is 
a proof tree for Strip(VcLL R , Mcll r ) l~ «i — ■> Sj+i- We use ^2 to denote the (finite) set 
of all these proof trees 7~"- It is obvious that f2i is a proof forest for Dx{p/X} ==>f \t n , 
moreover, 

Dep(fii) < Dep{9). 

Thus, by IH, we have Dx{q/X} =^f Wi and t n C TZ C gi for some g^. Similarly, 
for the transition D' x {p/ X} =>f |s n , we also have D' x {q/ X} =>f W2 and s„ C 

TZ \Z q' 2 for some g 2 . Then, by Theorem 14. 3[ it is easy to check that p' = t n Ds n C 
~RS " ~RS 

1Z C giOga- Moreover, we also have B x {q/X} = D x {q/ X}UD' x {q/ X} Wi^qL 

(ALT-upto-2) Suppose that B x {p/X} and B x {q/X} are stable. Let B x {p/X} p 
\p' and f2 be its any proof forest. So, there exist po, . . . ,p n {n > 1) such that 

B X {p/X} = po -°^ F pi ——^F ■ ■ ■ ——^F \Pn = P', dLSll) 

and f2 exactly consists of proof trees 71 for Strip(VcLL R , Mqll r ) I - Pi Pi+i with 
i < n, where ao = & and ay = r(l < j < n). We want to prove that there exists q' such 
that i?x{g/X} =>f W and p' C 72. C g' by induction on Dep{VL). Since £?x{p/^} 
is stable and X does not occur in any scope of conjunctions in Bx , the most top operator 
of Bx is neither disjunction nor conjunction. Thus, we distinguish five cases based on 
the form of Bx- 

Case 1B X = X. 

Due to Bx{p/X} = p ===>i? \p\ we have p F. Moreover, since p(= Bx{p/X}) is 
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stable, we get p =^f \p- Hence it follows from p =rs Cx{p/X} that 
Cx{p/X} ==>f \s and p C s for some s. 

Further, since X is strongly guarded and does not occur in any scope of conjunctions in 
Cx, by Lemma T5. 171 there exists a stable context C' x such that 

(b.l) X is strongly guarded and does not occur in any scope of conjunctions in C' x , 
(b.2) s = C' x {p/X}, and 
(b.3) C x {q/X} =±> C' x {q/X}. 

Then it follows from pC s = C' x {p/X} and p =^>f \p' that 
~RS 

C' x {p/X} =^f \s' and;/ C s' for some s'. 

~i?s 

Since p -f-^r, by (b.l), Lemma [5.101 and 15 . 1 71 there exists a stable context C x such that 
(c.l) s> = C x {p/X}, 

(c.2) X does not occur in any scope of conjunctions in C x , and 
(c.3) C' x {q/X} C x {q/X}. 

Moreover, since q(= B x {q/X}) is stable, so is C x {q/X}. Then, by (b.3) and (c.3), we 
have 

Cx{q/X} \C' x {q/X] =£> \C x {q/X}. 

Further, by Lemma O and EM it follows from p, q, C x {p/X}, C' x {p/X}, C x {p/X} <£ F 
that 

C x {q/X} =^ F \C' x {q/X] ==^>p \C x {q/X}. &$2) 
Then, since Cx{q/X} =rs q an d q /— we get 

C' x {q/X} C q. 

~RS 

Further, due to ([71512). it follows that 

5 A -{q/Jf}(= g) |q' and C^-{q/X} C g' for some q'. 

~RS 

Moreover, p' C s' = C^{p/X}ftC£{g/X} C q', as desired. 

~ RS ~ i?S 

Case 2 i?x = a.D x . 

So a = a and =^f Clearly, D x {<?/X}) e i?. By (ALT- 

upto-1), there exists g' such that -Dx{<z/A} ===>f \q' and p' C 7£ C <?'. Moreover, 

~RS 

it is evident that a.D x {q/X} =>f W ■ 

Case 3 B x = D X UD' X . 

W.l.o.g, assume that the last rule applied in 7n is Dx ^ p / X ^ >Pl ' £jd£/J£lzi± Then 

FV D x {p/X}DD' x {p/X}^ Pl 

To has a proper subtree, say Tq, which is a proof tree for Strip^chhn, -MclLr) h 
-Da"{p/X} pi. Clearly, f2' = {7q , 7i : 1 < i < 1} is a proof forest for ==>f 
|p' and Dep(Q?) < Dep(fl). Moreover, since B x {q/X} is stable, so are D x {q/X} and 
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D' x {q/X}. Then, by IH, we have Dx{q/X} =>f W and p' C 72 IZ g' for some 

g'. Moreover, D' x {p/X} £ i* 1 because of Bx{p/X} £ F, which, by Lemma 17.21 im- 
plies D' x {q/X} £ F. Hence B x {q/X} = D x {q/ X}DD' x {q/ X} £ F, and B x {q/X} = 
Dx{q/X}UD' x {q/X} =^ F \q' , as desired. 

CaseiB x = D x \\a D' x . 

Then the last rule applied in 7o is one of the following three formats: 

(1) D x {p/X}^t 1 ,D' x { P /X}^s 1 . h ^ || 

(2) r Dx \ p/X} ^ t ;' D 'x {p/X}7 ^ r , . with a ^ A and Pl = tj |U /X-lp/ZX"}; 

(3) D' x {p/x}^ Sl ,D x { P /x}^ . h d a and pi = D x {p/X\ \\ A s x . 

V ' D x {p/X}\\ A D' x {p/X}^D x {p/X}\\Asi ^ Fi AlF/ S l|A 

We treat the first one, and the proof of the later two runs as one of Case 3. Clearly, 
7o has two proper subtrees 7q and 7q", which are proof trees for Dx{p/X} -°^> t\ 
and D' x {p/X} — s\ respectively. Moreover, for the transitions p\ — > ■■■ |p n , 
there exist two processes sequences t%, . . . , t n and s\, . . . , s n such that t n , s n are stable, 
p n = t n \\a s n , and for each 1 < i < n, p% = U \\a Si and the last rule applied in % is 

, r , t 
either ^i+i m °i ' ^i+i 



IU s » — y IU s »+i IU s * — ► IU 

For the former, Sj+i = s$ and 7i contains a proper subtree 77 which is a proof tree for 
Strip(TcLL H , Mcll r ) b t» — > We use Oi to denote the (finite) set of all these 
proof tree 77- Similarly, for the latter, ti+i = i, and % contains a proper subtree 1~" 
which is a proof tree for Strip(VcLL R i ^cll r ) b — — > s i+1 . We use f2 2 to denote 
the (finite) set of all these proof tree 77' < Clearly, f2' = {7q} U f2i is a proof forest for 
D x {p/X} =^> F \t n and Dep{n') < Dep(Q). Thus, by IH, we have D x {q/X} |^ 
and t n Z 72 IZ q[ for some gj.. Similarly, for the transition D' x {p/X} ==^f \s n , we 

~RS ~RS 

also have D' x {q/X} =>f W2 an d s„ C 72 Z (72 for some q' 2 . Therefore, by Theo- 
rem 14. 3[ we obtain p' = t n \\a s n E 72 E <7ilU <72- Moreover, it is not difficult to 

~ fiS 1 ~ RS 

see that Bx{<z/X} = D x {q/X} \\ A D' x {q/X} =^ F \q[ \\ A q' 2 because of B x {q/X} 
D x {q/X} ^ F \q[ and D' x {q/X} =^ F W 2 - 



Case 5 5 x e (F|£). 

Clearly, the last rule applied in 7n is ^ tY \ E ){ p / x }~~~^ rpi . Hence 7n contains a proper sub- 

tree, say 7q , which is a proof tree for Strip(VchL R , Mqll r ) b (iy |i?){p/X } — ^ pi, and 
Dep{%) < Dep(%). So, ft' = {7?, : 1 < i < n} is a proof forest for (t r |£:){p/X} ^> F 
\p' and Dep(n') < Dep(Q). Then, by IH, we have (t Y \E){q/X} ==> f k' and p' C 

72 IZ g' for some q' , moreover, B x {q/X} = (Y\E){q/X} =^ F \q', as desired. 

(ALT-upto-3) Let B x {p/X} and B x {q/X} be stable and B x {p/X} £ F. We shall 
prove X(Bx{p/X}) Z X(B x {q/X}), the converse inclusion may be proved in a similar 
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manner and omitted. Assume that Bx{q/X} — q' . Then, for such a-labelled transition, 
by LemmaEl there exist B' x ,B' x ~ and B" ~ with X <£ Y that satisfy (GP-a-1) - (CP- 

a-4). For the case Y = 0, it immediately follows from (CP-a-3-iii) that B x {p/X} 

B Xj y{p/X). 

Next we handle the case Y ^ 0. In this situation, by (CP-a-3-iii), to complete the 
proof, it suffices to prove that 2{p) — 2{q). By (CP-a-1) and (CP-a-3-i), we have 

B x {r/X} ^ B' x ~{r/X, r/Y} for any r. 

Then, since B x {p/X} and B x {q/X} arc stable, by Y ^ 0, (CP-o-2) and Lemma I5T21 
and !5.4[ it follows that both p and q are stable. Hence p ==>f \p by p £ F. Then, due to 
P =rs C x {p/X}, we have 

Cx{p/X} ==>f \s and p \Z s for some s. 

For the transition above, since X is strongly guarded in C x , by Lemma f5. 171 there exists 
a stable context Dx such that 

(d.l) s = D x {p/X} 

(d.2) X is strongly guarded and does not occur in any scope of conjunctions in D x , and 
(d.3) C x {q/X}^D x {q/X}. 

Hence l(p) = l(D x {p/X}) by (d.l), pn s and p £ F. Moreover, by (d.l), (d.2) and 

~RS 

Lemma r5.10[ we have Dx{q/X} and 

2(p) = 2(D x {p/X}) = l(D x {q/X}). 

On the other hand, since s = Dx{p/X} ^ F, by Lemma 17.21 and p, q ^ F, we ob- 
tain D x {q/X} i F. So, C x {q/X] \D x {q/X}. Further, it follows from q = RS 
Cx{q/X} and q -f^r that D x {q/X} C q. Hence 2(D x {q/X}) = 2(q) because of 

~RS 

D x {q/X} £ F. Therefore, 2(p) = 2(D x {p/X}) = 2(D x {q/X}) = l(q), as desired. □ 

The next lemma is the crucial step in the demonstrating the assertion that (X|A = t x ) 
is a consistent solution for a given equation X =rs tx whenever consistent solutions 
exist. 

Lemma 7.4. For any term t x where X is strongly guarded and does not occur in any 
scope of conjunctions, if q =rs t x {q/X} for some q ^ F then (X\X = t x ) £ F. 

Proof. Assume p =rs t x {p/X} for some p F. Then t x {p/X} F. Set 

By{p/Y} F and Y does not occur in any scope of 



n = iB Y {(X\X = t x )/Y}. . 

(_ conjunctions m By 

It is obvious that = t x ) E £1 by taking By — Y. Thus we intend to show 

that fl n F = 0. Assume C Y {(X\X = t x )/Y} e fl. Let T be any proof tree for 
Strip{V CLLa ,M CLLR ) h C Y {(X\X = t x )/Y}F. Similar to Lemma Ed it is enough 
to prove that T has a proper subtree with the root labelled with sF for some s £ O. 
which is a routine case analysis based on the last rule applied in T. Here we treat only 
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two cases as samples. 
Case \C Y =Y. 

Then C Y {{X\X = t x )/Y} = (X\X = t x ). Clearly, the last rule applied in T is 

either = **> f or W : (X\X = t x ) =± \r} 

(X\X = t x )F (X\X = t x )F 

For the former, T has a proper subtree with the root labelled with (tx\X = t x )F, 
moreover, (t x \X = t x ) = t x {(X\X = t x )/X} G £1 due to t x {p/X} £ F, as desired. 

For the latter, if {X\X = t x ) ■/—>, then, in T, the unique node directly above the root 
is labelled with = t x )F, moreover (X\X = t x ) G fl, as desired. In the following, 

we consider the nontrivial case (X\X — t x ) — K Since t x {p/X} ^ F, by Theorem 14.21 
we get t x {p/X} =^4>f \p' for some p' . For this transition, since X is strongly guarded 
and does not occur in any scope of conjunctions, by Lemma 15.171 there exists a stable 
context B x such that 

(a.l) X is strongly guarded and does not occur in any scope of conjunctions, 
(a.2) p' = B x {p/X}, and 

(a.3) t x {(X\X = t x )/X] =£*. B X {(X\X = t x )/X}. 

Since p' = B x {p/X} by (a.l) and LcmmaEjjll B X {(X\X = t x )/X} Then 
it follows from (a.3) and (X\X = t x ) that (X\X = t x ) =^> \B X {{X\X = t x )/X}. 
Hence T has a proper subtree with the root labelled with B X {(X\X = t x )/X}F, more- 
over, B X {(X\X = t x )/X} G ft because of p' <£ F, (a.l) and (a.2). 

Case 2 Cy = (Z\E). 

So C Y {(X\X = t x )/Y} = (Z\E{(X\X = t x )/Y}). Then the last rule applied in T is 
{t z \E){(X\X = t x )/Y}F lr7 {rF : (Z\E){(X\X = t x )/Y} ^ jr} 

either MfflF» (Z = * z e S) ° r ' 

For the first alternative, by Lemma 14.11( 8). it follows from (Z\E){p/Y} F that 
(tz\E){p/Y} F. Since Y does not occur in any scope of conjunctions in (Z\E), by 
LemmaE2i;5), nor does it in (t z \E). Therefore (t z \E){(X\X = t x )/Y} € ft, as desired. 

For the second alternative, since {Z\E){p/Y} ^ F and p =rs t x {p/X}, we get 
{Z\E){t x {p/X}/Y} <£ F by Theorem E3J So (Z\E){t x {p/X}/Y} =^ F \p' forjome 
p' . Then, for this transition, by Lemma 15. 17\ there exist processes qw with W G W and 
a context D y ^ with Y ^ W such that 

(b.l) t x {p/X} \q w wtthWeW and p' = D yW {t x {p/X}/Y, m/W}, 

(b.2) Y and each VF(G PT) are strongly guarded and do not occur in any scope of 

conjunctions in -Dy^y, and 
(b.3) (Z\E){r/Y} D YW {r/Y,f^/W} for any r and r w with W G W such that 

r =k> r w . 

Then, since X is strongly guarded and does not occur in any scope of conjunctions in 
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t x , by Lemma \5. 171 and 15. 101 for each transition tx{p/X} ==> \qw, there exists a stable 
context tx such that 

(c.l) X is strongly guarded and does not occur in any scope of conjunctions in tjj[ , 
(c.2) q w = t^{p/X}, and 

(c.3) t x {(X\X = t x )/X} \t%{(X\X = t x )/X}. 

For the simplicity of notation, we let Qw stand for t^{(X\X = tx)/X} with W G W . 
So, by (c.3), (X\X = t x ) \Qw for each W G W. Hence it follows from (b.3) that 

(Z\E){(X\X = t x )/Y} =^ D Y W {(X\X = t x )/Y, Qw/W}. (Hi) 

By (b.2) and (c.l), it is not difficult to see that X is strongly guarded and does not 
occur in any scope of conjunctions in D y ^{tx /Y, t^/W}. So, by Lemma fo.lOl and 
p> = D YW {t x /Y,t^/W}{ P /X} A, we get 

D Y ^ w {tx/Y,t^/W}{(X\X = t x )/X} A • 

Hence D yW {(X\X = t x }/Y,Qw/W} by Lemma O and 1((X\X = t x )) = 
X(tx{(X\X = tx)/X}). Then T has a proper subtree with the root labelled with 
D Y,wi( X \ X = tx)/Y,Qw/W}F due to (fTl l). On the other hand, by Theorem O 

and p = RS t x {p/X}, it follows from p' = D YW {t x {p/X}/Y,t^{p/X}/W} (£ F that 

D YW {p/Y,tf{iix}/W} i F. Set 

D' Y A D YW {tf{Y/X}/W}. 

Therefore, D yw {(X\X = t x )/Y,Qw/W} = D' Y {(X\X = t x )/Y) G ft, as desired. □ 

We now have the below assertion which states that given an equation X —rs tx 
satisfying some conditions, (X\X = tx) is the unique consistent solution for it whenever 
consistent solutions exist. 

Theorem 7.1 (Unique solution). For any p, q £ F and tx where X is strongly guarded 
and does not occur in any scope of conjunctions, if p =rs tx{p/X} and q —rs tx{q/X} 
then p —rs q- Moreover, (X\X = tx) is the unique consistent solution modulo =rs for 
the equation X =rs tx whenever consistent solutions exist. 

Proof. If p cxi q then p —rs q follows from Lemma 17.31 otherwise, w.l.o.g, we assume 
that p is stable and q is not. By Theorem l6.ll r.p —rs P —rs tx{p/X} =rs tx{r.p/ 'X} . 
Then, by Lemma l7.3[ it follows from T.p,q £ F, r.p cxi q, r.p —rs tx{r.p/ X} and 
Q =RS tx{q/X} that r.p = RS q . Hence p = RS q. 

Suppose that X =rs tx has consistent solutions. It is obvious that (X\X — tx) —rs 
t x {(X\X = t x )/X} due to (X\X = t x ) (t x \X = t x ) = t x {(X\X = t x )/X} and 
Lemma [5.161 Further, by Lemma [7.41 (X\X — tx) is the unique consistent solution of 
the equation X =rs tx- D 

As an immediate consequence, we have 
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Corollary 7.1. For any term tx where X is strongly guarded and does not occur in 
any scope of conjunctions, then the equation X —rs tx has consistent solutions iff 
(X\X = t x )iF. 

Proof. Immediately by Theorem 17. II □ 

We conclude this section with providing a brief discussion. For Theorem 1 7. 11 the con- 
dition that X is strongly guarded can not be relaxed to that X is weakly guarded. For 
instance, consider the equation X =rs t.X, it has infinitely many consistent solutions. 
In fact, for any p, it always holds that p =rs t -P- Moreover, the condition that p,q ^ F 
is also necessary. For example, both (X\X = a.X) and _L are solutions for the equation 
X =rs a.X, but they are not equivalent modulo =rs- Finally, at present, we do not 
know whether this result still holds if we omit the hypothesis that X does not occur in 
any scope of conjunctions in tx- 



8. Conclusions and future work 

This paper considers recursive operations over LLTSs in pure process-algebraic style. 
We propose the process calculus CLL^, which is obtained from CLL by adding recursive 
operations. Although CLL contains logic operators A and V over processes, due to lack of 
modal operators, it does not afford describing abstract properties of concurrent systems. 
However, under the mild condition that the set of actions is finite, we can integrate 
standard temporal operators always and unless into process calculuses containing A and 
V in a recursive manner (jZhu et al. 2013|) . In detail, the processes 

(X\X = qV(pA( f\ \a]X))) 

aGAct 

and 

(X\X=pA( /\ \a\X)) 

aGAct 

capture temporal operators unless and always respectively, where \a~\X is the abbrevia- 
tion of 




and true is the abbreviation of 

(X\X = \/ □ a.X). 

X 1 V a€A ' 

AQAct 

For a fuller treatment of this issue we refer the reader to (|Zhu et al. 2013|) . Therefore we 
can make a conclusion that, under the assumption that Act is finite, the calculus CLLr 
is enough to express safety properties considered in dLiittgen and Voglcr 2 011[ ). 

This paper have showed that the behavior relation Qrs is precongruent w.r.t all op- 
erations in CLLfl, which reveals that this calculus supports compositional reasoning. 
Moreover, we also provide a theorem on the uniqueness of consistent solution for a given 
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equation X =rs tx where X is required to be strongly guarded and does not occur in 
any scope of conjunctions in tx- 

One of future work is to find a (ground) complete proof system for regular processes in 
CLL/j along lines adopted in (Milner 1989). Here a process is said to be regular if its LTS 
has only finitely many states and transitions. To this end, it is necessary to adopt the 
restriction that recursive variables do not occur in any scope of conjunctions in recursive 
specifications. Otherwise, non-regular expressions would occur, for instance, consider the 
process (X\X = a.X A r.a.X). Thus we think that the result on the uniqueness of 
consistent solution obtained in this paper may be enough for this aim. 
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